2a573a9f648c8fdd7c4b01dcde6a376b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2a573a9f648c8fdd7c4b01dcde6a376b_JaffaCakes118
Size

57KB
MD5

2a573a9f648c8fdd7c4b01dcde6a376b
SHA1

ceea7acd9a953c85e1744b2e5f5b85f8605e008c
SHA256

73e85640afe372dd08cd70622959512cd08445c40f128f0b3c01750eb6e40447
SHA512

e80acff243e9e7b37cf1abe2f3008b89582535d58c4479d3b2bc7b6adc640bcee7460ada4e59ddcb7cb1ae44e14452737bf612c107caaa7a37cd92a917c57ad8
SSDEEP

768:KL/U+RIOolztxkPhUPooV6RWCKqxjJz8WYRAs0uIGAKWp89OEL11prDuDMIXO0E+:U/iahoV6hK+fsbAKg8911HgPE5Frex

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a573a9f648c8fdd7c4b01dcde6a376b_JaffaCakes118

Files

2a573a9f648c8fdd7c4b01dcde6a376b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 47KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE