f5c322e703be1b0b634322d9ee6501c7_JaffaCakes118 | Triage

Sharing

General

Target

f5c322e703be1b0b634322d9ee6501c7_JaffaCakes118
Size

104KB
MD5

f5c322e703be1b0b634322d9ee6501c7
SHA1

837c9cb2aa1c3dac6e25de40e7eb6bbd910f81e3
SHA256

5a3f77abfd48abd8aadbedcbf42d62358622d11259d89ad8b83347c5df4ec6ca
SHA512

1beb0a07ce23a3aaafff5fcaa33fbe285ca7867832237dd75fe29d5721e323f030721a7abe46d65bc231592f1ba71b00d453b584cea59a8194c0ed6b41c28802
SSDEEP

3072:lulralyyTGRiwsOWaWGy0kKdKUjm1lpO:l4a7TG84AxUjUlpO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5c322e703be1b0b634322d9ee6501c7_JaffaCakes118

Files

f5c322e703be1b0b634322d9ee6501c7_JaffaCakes118
.exe windows:5 windows x86 arch:x86

0b13e5943959f22811be89267859b4b1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
VirtualAlloc
GetProcAddress

aclui

CreateSecurityPage

Sections

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 259KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ