0d4cde4d7416981b7d3f44489e10f260_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0d4cde4d7416981b7d3f44489e10f260_JaffaCakes118
Size

102KB
MD5

0d4cde4d7416981b7d3f44489e10f260
SHA1

48aae6f1ad6e8fd4a6e69d92fa40da7a85ae820a
SHA256

a03e4b3afaf1385682c36864552422b4d8752f83cdd400e12451fae51f93a7cc
SHA512

447e19406bf9183238bc0857503ffc6d4d8de3cc5476fa76750b65fcf2e9511002a7452990cccb14be967c3ade68b3f0a67af9db15f74119a0670daf6d685a9d
SSDEEP

1536:2oPn5y+kiAqQke3CztdgFUwCUGarhL3YSnmAkliZAZs82Bdc3VY2As7ruudTZIYf:22g+JAqneyDQ7OSnglMyVYWmC/fuLp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d4cde4d7416981b7d3f44489e10f260_JaffaCakes118

Files

0d4cde4d7416981b7d3f44489e10f260_JaffaCakes118
.exe windows:5 windows x86 arch:x86

dd5ae834aee8e69d0a4f8c1f63eec484

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
LoadLibraryA
GetProcAddress

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 23KB - Virtual size: 406KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 42B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ