409bc6378a862fd755b351186d48c58a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

409bc6378a862fd755b351186d48c58a_JaffaCakes118
Size

65KB
MD5

409bc6378a862fd755b351186d48c58a
SHA1

27c4509ae554c4e752570528c02904f8a87aec4f
SHA256

da6fbc3b526ffe200015d57960f53fa4665b46b0240983043d3b2456fd2e8038
SHA512

7ed30eccaa3414818f3fc932db8b5038831081109ed192d2dccc3bead1e213e8f233315d97ff56fac5ad37ec84564c8eb9edb8830f7584a1b1f17236c49fe414
SSDEEP

1536:KjPcJ61hlg4a8bZ/htytmn9UFRi4bR1ar6gBT:KjPc61ha4a6/+t5FvFBgV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
409bc6378a862fd755b351186d48c58a_JaffaCakes118

Files

409bc6378a862fd755b351186d48c58a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5d0da584648aa3f010e48fcbadcc9991

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

InitCommonControlsEx

kernel32

GetProcAddress
VirtualProtect
VirtualFree
LoadLibraryA
VirtualAlloc

advapi32

QueryServiceConfigA

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 330B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ