fd23d92c60a7591cea8a85c4d8632849_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fd23d92c60a7591cea8a85c4d8632849_JaffaCakes118
Size

328KB
MD5

fd23d92c60a7591cea8a85c4d8632849
SHA1

735b9dcd14d00781ca9a2954302467139f39fbf1
SHA256

01e7b5c23b3e6fdb5783d7d4e437835fcd24672c628a5f4a7ee05cb2cd1cf0b4
SHA512

a93b26098e0b3b6868fa98b96d9b784b79e0d551fcafd7c2502890515beb4f9c68cdfb6a841af5b203f8de7b0b3dfbb1a4b70ff6b92dd939cba067bd71cfaf8e
SSDEEP

6144:OIWbEGsxdTGzTb1P6LG/J9hS14sCIFQwaEyUNxYrYBei6C3Y3t:OISEGsx68LG/J9h1sQuxYrQUCIt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd23d92c60a7591cea8a85c4d8632849_JaffaCakes118

Files

fd23d92c60a7591cea8a85c4d8632849_JaffaCakes118
.exe windows:5 windows x86 arch:x86

8ffc31bccd11f7f873be952d93bdc291

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

advapi32

RegOpenKeyExW

oleaut32

SysAllocStringLen

mscoree

CorBindToRuntimeEx

Sections

.text
Size: 227KB - Virtual size: 736KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 94KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE