f9c00648c4b5848cc4dd6df48dfd7ec8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f9c00648c4b5848cc4dd6df48dfd7ec8_JaffaCakes118
Size

732KB
MD5

f9c00648c4b5848cc4dd6df48dfd7ec8
SHA1

d8e8245e2decf8d33907dbb615c614051b3cc54b
SHA256

b52c7bf1507cf4c5d82cff34b930d4e434991359c2aa3c6378ab183c04e25e10
SHA512

f75fb0fbe85cdef59a801b3646c662e6c684e56ae877b676a6d00ae6e03aaa1ff98528e0a092b8cba8f3fe938b8370164bcd149d358688ffddafb83eb261dae9
SSDEEP

12288:UShKg8H5btg8d3ZsurFQrfiLXK6duSs2dsED9sXz3B+fR+/9C7E7h8z5dRkT0d+q:H8Z/3nBQj6b421a+5+wYadLLRz5C2f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f9c00648c4b5848cc4dd6df48dfd7ec8_JaffaCakes118

Files

f9c00648c4b5848cc4dd6df48dfd7ec8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dae2264e721d7c66f7fa35e864d11aba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA

Sections

.naked1
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.naked2
Size: 728KB - Virtual size: 728KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ