090a4d0aef265b6e12362c821cab41d0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

090a4d0aef265b6e12362c821cab41d0_JaffaCakes118
Size

53KB
MD5

090a4d0aef265b6e12362c821cab41d0
SHA1

835830d8f481887f272bf6eed96d9d56910af5b5
SHA256

ecfbddb12d40609ecaa6b944c7f3263bd7062ae736a30ac7724a0ad40335edb8
SHA512

b67b42ffe765218fef1ab2fab6442c7d2ce6fc7d7df5fec82ccea2c2bbc4f83650927f5d185717d12cfb1670c6b58de5552f00c21c02b1cff0dec7bf30f9e2df
SSDEEP

1536:MeUrvTw4iKa4wrMOKlk4OZqSs0+6bKtYvW4P:MeUrvUP3fre0+kRO4P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
090a4d0aef265b6e12362c821cab41d0_JaffaCakes118

Files

090a4d0aef265b6e12362c821cab41d0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 48KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE