4710e2bb1e1bf14e67901b317fbbc377_JaffaCakes118 | Triage

Sharing

General

Target

4710e2bb1e1bf14e67901b317fbbc377_JaffaCakes118
Size

188KB
MD5

4710e2bb1e1bf14e67901b317fbbc377
SHA1

75535a194cd3b248a2d381834d228c3be5d9185a
SHA256

2bea62a6c8eb6fb5d88a6ac386f62c9451e38f9b2d921844a32e03910d976c3c
SHA512

3dfd77de0cd61807ded46b546514d7b115fda8fe520bc67d5bf3c2e5fcc0df531c830927f3f3e8ad913ee0117a4e97f748297d8109d046eba0e7d97eae326ed0
SSDEEP

3072:TmQQj1TA1dpzedVhsNncYvRi2saPA61Fk9DMNtD3FadDK6hxIJzjOX:TLQF2pedVhIzps21F8DMNt6DNxI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4710e2bb1e1bf14e67901b317fbbc377_JaffaCakes118

Files

4710e2bb1e1bf14e67901b317fbbc377_JaffaCakes118
.exe windows:5 windows x86 arch:x86

0a3983836558fbe3886cc992a0fbd715

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress

ntdll

memset

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 527B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 177KB - Virtual size: 177KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 410B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ