446b70bfcb1bd315a4cacfe948c32410_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

446b70bfcb1bd315a4cacfe948c32410_JaffaCakes118
Size

81KB
MD5

446b70bfcb1bd315a4cacfe948c32410
SHA1

adc25e5b0db22756dd8a696a85a12ef8b80dba52
SHA256

9d853041955a0daddf50771053f9dd2f1016d67a835a59b52954858bf5d82612
SHA512

177aa38c81135d349eb247e607659d888c9a161b1397e2bd26436beab2f8a1e2712775ea84cd624da0857e2e4b96bdcb65f46908fd47440a305fe4cb683a3a87
SSDEEP

1536:kGaOWdDs/SHmohheIvYdbG1GC8+a9k6FAzz0fiCI9NM2i8A7xedj/Mamtz1n71+I:kGaO7SHJeIgdK1GZvlAzAjyavudjZ61d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/HD_Speed.exe

Files

446b70bfcb1bd315a4cacfe948c32410_JaffaCakes118
.zip
HD_Speed.exe
.exe windows:4 windows x86 arch:x86

87bed5a7cba00c7e1f4015f1bdae2183

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress

Sections

.text
Size: - Virtual size: 91KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 78KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

exever
Size: - Virtual size: 556B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.e
Size: 77KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
ReadMe_ENG.html
.html