4119c94035e6843a77f44806d6c5aec7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4119c94035e6843a77f44806d6c5aec7_JaffaCakes118
Size

16KB
MD5

4119c94035e6843a77f44806d6c5aec7
SHA1

851ad7fe55eca080574f10f63d879898ea79e3f9
SHA256

e60d2e10654d618d264378c6fce2a89394f0bff06370b3acaeb480e76c9c24d4
SHA512

02e573e1e3ea61799bde76bc3cc084b776e9b47fbadc2854f2606345ff7ece420b468ec39b00c17bc0b0ba636211bd327be4e539419d58d266116c224e6a9acc
SSDEEP

384:3UBBgG4s+vyv69AFVEnW3CEgNXKIhpgh9OoHFB:Er/4nirEhEgfUOa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4119c94035e6843a77f44806d6c5aec7_JaffaCakes118

Files

4119c94035e6843a77f44806d6c5aec7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5a0ab55f616b558c50a3292b9114a401

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualProtect
GetProcAddress
LoadLibraryA
VirtualAlloc
Sleep

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.attach
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE