0241112947b2f85c018d73532488cced_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0241112947b2f85c018d73532488cced_JaffaCakes118
Size

3.4MB
MD5

0241112947b2f85c018d73532488cced
SHA1

214f6b2bd2a677e17e3c3990e7b63decc465b3b4
SHA256

622fd38a29e394751d55328793e1308fea0da8f32a7733d84c4db31ffdb2378b
SHA512

9f585fcf5808083b70ea02f20aac41cdb7e9ac1f2038b2eb0685da69a90c55ccbd1b1fce15c2cee384d50352579755e88c0886cb3629079c1c26f03a67b4df95
SSDEEP

768:ExFZLfLcLIowicE3fq6StyHu4hhWciQvhn7edHAKjhFj2rXge:kjQLJyMVNHuSh9iQJ7edHjqTh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0241112947b2f85c018d73532488cced_JaffaCakes118

Files

0241112947b2f85c018d73532488cced_JaffaCakes118
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.data
Size: 26KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE