4156dd13a6d00243701b29bed9ca851f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4156dd13a6d00243701b29bed9ca851f_JaffaCakes118
Size

32KB
MD5

4156dd13a6d00243701b29bed9ca851f
SHA1

3f18d1ae0ae1792e6d8c65303491dc82614a67e5
SHA256

383f6bf915489f7fe7ae3721cf343431577a67836e474eabe7d6b2ad51530798
SHA512

5f55aada81301d5cc195a3871784c4a00e829ce14fd2517669776e94ff1fbe19fbf6142d676a97c68fb62a579e2e70acecd60f2a4ca7b259489325e500e86723
SSDEEP

768:2uOwnyKyTsnEhJS+ym9YKr37igXsFLvJBoeMDnBNXWIXhW:2vfK+ymaKrLp8VvToeMvXWIx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4156dd13a6d00243701b29bed9ca851f_JaffaCakes118

Files

4156dd13a6d00243701b29bed9ca851f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3a2f0a00494382fbbd510d7cb8c4000b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

WSAEventSelect

kernel32

VirtualQueryEx

user32

GetInputState

Sections

.text
Size: 1024B - Virtual size: 925B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE