558d00f64eab9273c8e7ade549fbbe40_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

558d00f64eab9273c8e7ade549fbbe40_JaffaCakes118
Size

36KB
MD5

558d00f64eab9273c8e7ade549fbbe40
SHA1

41badea46ad29f56a226ffc58d6a06274c6a8f82
SHA256

c0f3a63fde8a93013b4e2f3766f0af2d8399ffe828f649947fb34f2b02987f9b
SHA512

fdcccc6c547590c4f21994fe748df0995566c12f6b78a442091b059ad7a1f4b837c43cd515b44f9da89357eedcfb0bfad89c7020a290d4946ada738ffd556215
SSDEEP

768:mi66mjqFCfZZc8u2Esbe4EIXy5DE333T:miRFyZZc8FEHIXyu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
558d00f64eab9273c8e7ade549fbbe40_JaffaCakes118

Files

558d00f64eab9273c8e7ade549fbbe40_JaffaCakes118
.exe windows:4 windows x86 arch:x86

025d0ac8d78c6a753289d35c3f096413

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

rpcrt4

RpcBindingSetOption

kernel32

GetVersion
lstrlenA
CloseHandle
CreateFileW
ExitProcess
GetLastError
GetProcAddress
GetSystemDefaultLCID
GlobalAlloc
GlobalFree
LoadLibraryExA
VirtualAlloc
VirtualFree

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 438B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE