f481e9afa67585ef62cc94a992daaff2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f481e9afa67585ef62cc94a992daaff2_JaffaCakes118
Size

172KB
MD5

f481e9afa67585ef62cc94a992daaff2
SHA1

20bd1d3dda636a210541aa4b12b0fc8785312bac
SHA256

1831348c072032cdf18b543b340bb5d0ac50bc51394e761f9be6e41b7310fbef
SHA512

ddb499a27105d9cb9b21c9a9047478cf8621a61d26bb0fe87d13aa8fec46bb5a07c0768141e639f161ed9b72642f7bb9d115180e4221a95e30d1a3c4b25bde50
SSDEEP

3072:kTwakrpEJ1KNRnFU0i60EtqU5uT8vN+fMq8S0bpZhxk0ZFUnrZI2vso05p5k5cV6:A5k9jDUpVELiS8rDUfwbj0PSqFV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f481e9afa67585ef62cc94a992daaff2_JaffaCakes118

Files

f481e9afa67585ef62cc94a992daaff2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4efc2d3e673738b5817f6cc5819957f6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MultiByteToWideChar
GetModuleHandleA
FlushInstructionCache
VirtualProtect
GetTickCount
GetLastError
GetProcAddress
LoadLibraryA
Sleep
LocalFree
LocalAlloc
VirtualProtect

user32

wsprintfA

Sections

X>3YI0$]
Size: - Virtual size: 127KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

'2386d6O
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

@hnbR+H:
Size: - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

SFJ0K8Cw
Size: - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

d+6w9/hu
Size: 168KB - Virtual size: 167KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE