407fba28f2c9eabc90859de4c37ffe47_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

407fba28f2c9eabc90859de4c37ffe47_JaffaCakes118
Size

32KB
MD5

407fba28f2c9eabc90859de4c37ffe47
SHA1

493e567ad2ea134b0751c37be2966cc57bf1f003
SHA256

3a08326d42b1fa69d4a104f1e072482936213460eabc5354b244402c8d287876
SHA512

6f72a719d3a7b6cf45997bca330150a0628b15049110135837ac3c92d3b42cf5b0e7a25a6d69b0737ab81ef97e1e936e3ea460a30114cb91e376cdbe1f6a3f1b
SSDEEP

768:ts9PZTGsAQXfqY9STyCnH+YmodWTI4Hp/fH6Ha1MOhj9bw68Qq:adZTGsfqJaJT5RyHabw68l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
407fba28f2c9eabc90859de4c37ffe47_JaffaCakes118

Files

407fba28f2c9eabc90859de4c37ffe47_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7e32191ed5d7cf49bf1f86011d2a6284

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
FreeResource
ResumeThread
VirtualProtectEx
WriteProcessMemory
VirtualAllocEx
GetThreadContext
CreateProcessA
LockResource
LoadResource
SizeofResource
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
LoadLibraryA
FreeLibrary

msvcrt

_ftol
_CIpow
malloc

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 586B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ