47090811070252be88719229eb1fb42c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

47090811070252be88719229eb1fb42c_JaffaCakes118
Size

52KB
MD5

47090811070252be88719229eb1fb42c
SHA1

59ce6524ac8c1c69addcfff883c70d965f508e3a
SHA256

991f0660ef8fa53b0ab71e3deb8d5dd8da60c8a747574600de49720d99682770
SHA512

c60a1144dc4fcbbca226e5fa221134ad756daa33d0976f0d371dfda5fcce0a08714837f42d586dbb12fa2021fde3cb518a8abbb30bc5228adf799a4870fae6f8
SSDEEP

768:4LhWmQosofA2YDJdJECWTMpLQPm+LsnWWEQiz9Hmf81DUvpWEnH:losofAfT3WgpL2mS9WEQkK892H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
47090811070252be88719229eb1fb42c_JaffaCakes118

Files

47090811070252be88719229eb1fb42c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

��ta
Size: 47KB - Virtual size: 736KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE