ffe81db28bd357ba55740860e0a4c511_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ffe81db28bd357ba55740860e0a4c511_JaffaCakes118
Size

69KB
MD5

ffe81db28bd357ba55740860e0a4c511
SHA1

bdea2bb0d70fbaa7bc2d67e6614803ccd4757256
SHA256

377cd44fe33449167ba22e450ffc379b3b0bc63e83b999d02ccda50b4e2219e8
SHA512

4519db5a24d6589728d93de7cd746c82841c40e1f9c2bed29005d48271e5c62cf31c86e0171fe2df50ba08d3ca8dbdd5a7136b2f553a8a3080507b86e26d3271
SSDEEP

1536:rGvbAVcVPxMXM9kzHtPpFBAwf9qXUr8HX7sF4n3vaOzNOuMs:rsAVYP+zJxUUrGsF4n3FYs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ffe81db28bd357ba55740860e0a4c511_JaffaCakes118

Files

ffe81db28bd357ba55740860e0a4c511_JaffaCakes118
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 63KB - Virtual size: 260KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE