399cc5b81efbf0db5061a9a73f855bcd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

399cc5b81efbf0db5061a9a73f855bcd_JaffaCakes118
Size

454KB
MD5

399cc5b81efbf0db5061a9a73f855bcd
SHA1

f47f609f58710d256400e14dbdcd8cc074f0c025
SHA256

2c7aaa06e78123c03894b3d1b52dab63339069bf2fcfd1cf669133ada5b5e220
SHA512

46e2d32df3a575002a97b7464c231f5b9d82c72ca896d1b21286095dd9b3e76be4e169114bacb91a27556e8c6306e4f558d1a2addbdbfb14de4e0ed11c38e850
SSDEEP

12288:JJxvYqkudCAVn3v+iEJmv7NibvhMCGijbI:TxAUCinmnMvB2CCGi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
399cc5b81efbf0db5061a9a73f855bcd_JaffaCakes118

Files

399cc5b81efbf0db5061a9a73f855bcd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5a498eee87e4d89512a84502f500181f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
GetModuleHandleA
LoadLibraryA

Sections

CODE
Size: 378KB - Virtual size: 860KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ccg
Size: 67KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE