1484c0948255abda7394121afd7bac9f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1484c0948255abda7394121afd7bac9f_JaffaCakes118
Size

27KB
MD5

1484c0948255abda7394121afd7bac9f
SHA1

cd1d04f2990b7dcde75c62ac5fda6c458689503b
SHA256

32d9a3e9ad8566d82830428bf174719c276ac7f94ea2f731f4703aac948d0a1a
SHA512

4af9b31606172b310cc9f2cb4251bad83d266c6fba07cce6bb7751792009f4cee1d70719796514d35188b18e8609d4c4f3d9134188460ef23f6e7aea9c616fce
SSDEEP

384:BttQyrqyKzeKHFgoc8a7HYKR2jjKbY2u6kEZ5WH9e9nMkZ:nlqJHF7AoGb175pfZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1484c0948255abda7394121afd7bac9f_JaffaCakes118

Files

1484c0948255abda7394121afd7bac9f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

986db9391df682362eec295bde82174a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetLastError
GetProcAddress
GetProcessTimes
HeapAlloc
HeapCreate
LoadLibraryA
VirtualAlloc

Sections

.text
Size: 1024B - Virtual size: 834B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ