fdeff485c5520b969557652e2b5d3f0b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fdeff485c5520b969557652e2b5d3f0b_JaffaCakes118
Size

37KB
MD5

fdeff485c5520b969557652e2b5d3f0b
SHA1

2a8c7d657a7c36d5b0517920f12adeea6d403314
SHA256

45f56b2954b28165b92ae8895bf501bdf4478fb6dc4d6cf3370b04fedee87f02
SHA512

6cf6903f7e15f8c6d11b8a663a1eae47f12d3cb70e3dbf06546179db80b046146fb7b5dc6e6f646aa6c3aca98a364ddadd1d90c563833bf5b5ca7a3aaef6ec6d
SSDEEP

768:qLVGHikkJ9g5+gE0vWHFFirJoXT63yH01d87KUTBLcCm0M66gj:qPkki+gqlFi1oX0yH01ymmLcd0M6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fdeff485c5520b969557652e2b5d3f0b_JaffaCakes118

Files

fdeff485c5520b969557652e2b5d3f0b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.bss
Size: - Virtual size: 741B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 33KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE