4107e68a18ef70875144cc3efea4bee4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4107e68a18ef70875144cc3efea4bee4_JaffaCakes118
Size

191KB
MD5

4107e68a18ef70875144cc3efea4bee4
SHA1

b759264e5583be0f5a521f2d4acd5fff4c3a31a4
SHA256

59d10c7560d67d2613ccf5f83b272f6435c9b7576c74539fab6db998e962b424
SHA512

969791a1bc633a9e22f55d31edc297ba398c5de8f50ae7b748d6242005717305a992c57a2710d4b854f044e386f233b119b9b044009109971eaedacf4dbe953c
SSDEEP

3072:XrBPzLjrYvr04q93JosLa3vSVd/Nc4YCmEUqD6G0fPbmeWlXeoqJulMS8CpZ66Xp:XRvjrYT07J9d/rQEND+P0lXejU38Cu6Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4107e68a18ef70875144cc3efea4bee4_JaffaCakes118

Files

4107e68a18ef70875144cc3efea4bee4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0ee1e94ff5fc00d6471ba1745e730373

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

msvcrt

__getmainargs

user32

wsprintfA

Sections

.text
Size: 22KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Sm0kes
Size: 140KB - Virtual size: 144KB

IMAGE_SCN_MEM_WRITE