03d04e78ec80f834687886e0675c80ad_JaffaCakes118 | Triage

Sharing

General

Target

03d04e78ec80f834687886e0675c80ad_JaffaCakes118
Size

94KB
MD5

03d04e78ec80f834687886e0675c80ad
SHA1

eab23525d5625fcf43190ae4439dcfcc927353e7
SHA256

6fa2993aa58c16b1bbe6bd87a86ebc9dff405c434e868634a9a24c80c6abe775
SHA512

ae406245cc4b747ec10443cae0e5add6bb8fe85698df41b4c94568206a8074ea87a37b3994bf5d5d1966ef63cc6eb5e27397a20eab2d670c2733cc22710b2a23
SSDEEP

1536:enoUTdRe5qqleFV0b3m0xXPdsWdQwodJeYNEA75ntjAjXOOSncUZaseeojILSZK+:enzTdR7qle4a0x+WAsYVBZAj+7fUhezB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03d04e78ec80f834687886e0675c80ad_JaffaCakes118

Files

03d04e78ec80f834687886e0675c80ad_JaffaCakes118
.exe windows:5 windows x86 arch:x86

839ad85c6f86f47eab6c4120d39ead8a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
VirtualAlloc
LoadLibraryA

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 42B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ