dfd83a9e69770ef94593fa898a59d006_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dfd83a9e69770ef94593fa898a59d006_JaffaCakes118
Size

275KB
MD5

dfd83a9e69770ef94593fa898a59d006
SHA1

55a9db3d8813b4f71f4126a02f53c09a78625ab2
SHA256

a70b158d1ee8fa3acdbb0230de56ea77698770e70ae3b8067e01efbe611189da
SHA512

654df5b37118044194adba9bb4e28983041b7614ef2df51b5ec99d91625cf8ccbe7b2ac89ac4d04632e899da901ecdac180f19f1b109481147b1d6cd4bec4299
SSDEEP

6144:1RmWasAYKwCLrRnOUwqakeSc/SdYJMBJxwxw9+Lo0tZAigWLagctXN:1YrsAYK7OUwqaQ4AoO0HA7OfctX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dfd83a9e69770ef94593fa898a59d006_JaffaCakes118

Files

dfd83a9e69770ef94593fa898a59d006_JaffaCakes118
.exe windows:4 windows x86 arch:x86

84f78af3ec4186a38cacde16641d168a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

ExitProcess
ReleaseSemaphore
GetProcAddress
LoadLibraryA
VirtualAlloc

Sections

.text
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 133KB - Virtual size: 674KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ