fca46cb558430d2d891d54812e76668a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fca46cb558430d2d891d54812e76668a_JaffaCakes118
Size

191KB
MD5

fca46cb558430d2d891d54812e76668a
SHA1

fbc6fa16277db6191ab1ae7b4e267e929280dd61
SHA256

3ba1e37a294208c05a16a177704add95fd7da3d4ab0267a31300e747110b42ae
SHA512

b7eaf002cbe56781100b485fd22a1378b93da9d957b8820fd303b6803d7e13dffac146cb8eae5f84a5c5f45685ec9a8142c5863398bc6e9a23bd9064bc3a4837
SSDEEP

3072:zTKQFod0rGJBUn1DVDbdIgBI/JN41swlmECRfKBLya4M8bnAXqLwA5p:/fuO0BgHdfMgcE6S+M8LAXDA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fca46cb558430d2d891d54812e76668a_JaffaCakes118

Files

fca46cb558430d2d891d54812e76668a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

CODE
Size: 186KB - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE