03de24eb99d93ed2c4b26bf0ca1bae55_JaffaCakes118 | Triage

Sharing

General

Target

03de24eb99d93ed2c4b26bf0ca1bae55_JaffaCakes118
Size

2.0MB
MD5

03de24eb99d93ed2c4b26bf0ca1bae55
SHA1

46cd4bfe1c8302f719b3561934a7d62b71af5327
SHA256

123640fcabe38c4e67caf8e6b25b780e2a0670ead0d163217d3f32e80d5ab62f
SHA512

a8d7baad7e1266c4b9c51a387cc432f9a9f388924c0683795ba31393f54b7115480dd3a8d8125013a75ca456322264ddc13469dbba6a6a62a61ae551859056a1
SSDEEP

49152:MZKPngdrRDjdmM5mbQIlKTX88dHMBYFwNrBouf:MZKPngdBZD5YlgNaouf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03de24eb99d93ed2c4b26bf0ca1bae55_JaffaCakes118

Files

03de24eb99d93ed2c4b26bf0ca1bae55_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2c35ed123bf7fb5532653325910c7a41

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleHandleA
VirtualAlloc
VirtualFree

Sections

.MiB
Size: 853KB - Virtual size: 4.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.1MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.llydd
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE