473b7478a0e07047bcb472e0acd50e45_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

473b7478a0e07047bcb472e0acd50e45_JaffaCakes118
Size

91KB
MD5

473b7478a0e07047bcb472e0acd50e45
SHA1

e2e22b784231395e93c959faf09b23070f2d031b
SHA256

5a689916f779c9c5934a5b52377d01d2242ebb88815e96189e71345157e2e911
SHA512

d9a60f2c9e96c56b8a1801b370d8423a5712044b7a663e9f8a3e6bb48fc566087e743b0b84ceb2b9540efe5561a724e9c6efb5d486b90a2f880ba7b9c08b3a06
SSDEEP

768:K00xcmTtJ2aVGekNJ2x7gUfYGdedbMpmQRJcvnyNQC+NaH9K7lgiJ2SR7mcdmje9:K005y8sNgxsUfYPbMphRCUMr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
473b7478a0e07047bcb472e0acd50e45_JaffaCakes118

Files

473b7478a0e07047bcb472e0acd50e45_JaffaCakes118
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 19KB - Virtual size: 180KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 70KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE