ff36084c57fe55f65a660fd0f45aac1f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff36084c57fe55f65a660fd0f45aac1f_JaffaCakes118
Size

2.3MB
MD5

ff36084c57fe55f65a660fd0f45aac1f
SHA1

29511c24e7ee3e7d030921ad0871e801fe74fcaa
SHA256

451ba7bccceee4356efc9774093384b7182571dbe3106aa3b1561e942418cd7b
SHA512

ea6d001dddb594e6e88004e3c2c8b6afb9a8310880ad878e7d0d28facf5c422a1baa205d962fd4b0298e5426d87731567a83bd2e726d1abbe95341daccb3f09f
SSDEEP

49152:RY3S2aF+0/XYQ2xKNmo1vco7usi9q1bTYWYVAYFG8eaYrzeAPEHj3BrE:RYC2O+0QBHoKovi9hVNFGiYrzXELBrE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff36084c57fe55f65a660fd0f45aac1f_JaffaCakes118

Files

ff36084c57fe55f65a660fd0f45aac1f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

8fd82e8d3bb8eb9dccfdbf29d39d96fc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
ExitProcess
VirtualAlloc
GetProcAddress

Sections

.text
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 814B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ