431f3dc2c89eb092d3d1cb64d7e95257_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

431f3dc2c89eb092d3d1cb64d7e95257_JaffaCakes118
Size

1.2MB
MD5

431f3dc2c89eb092d3d1cb64d7e95257
SHA1

1f6ebc6e2d037933f8d6a43e60a52edf5ce4feb5
SHA256

485838141f56cef1cc18832690cc71f0d7332bd9a441d97e197f5000fed17c5f
SHA512

79c0496c99c004e4803802ec70df8b1b401683415f697b853cd489e1d2bd46f1855284906e0be2b55add7ee6d10ffce27e0d01a8064acb19e50db2e1b4a9e13c
SSDEEP

24576:p6qa7z6utE0xST/hHlW4jce4HSBhvbhhiGerG7hR/0O0kAfnJvQn:pOzXy0CG4RjhheWtAfnJY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
431f3dc2c89eb092d3d1cb64d7e95257_JaffaCakes118

Files

431f3dc2c89eb092d3d1cb64d7e95257_JaffaCakes118
.exe windows:4 windows x86 arch:x86

723c6178e9e44578604530e425fb4590

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualProtect
GetCurrentThread
TerminateThread

Sections

CODE
Size: 405KB - Virtual size: 578KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 768KB - Virtual size: 768KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ