4582ebeb7887dedcfb995cb78168867b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4582ebeb7887dedcfb995cb78168867b_JaffaCakes118
Size

65KB
MD5

4582ebeb7887dedcfb995cb78168867b
SHA1

587dfca2c935138ac151b69ea58ec05666971510
SHA256

c370c27d32fc4a7672a131c5fd512387206e02aada90a12ab1d405ac8c919788
SHA512

a776ffa2f1e93152d4be5e91028061d0a38249c0b0da4e117e25ebae8b1b7e0f8a9ad8df2ea18a67ff2c2a4a485f6cbd4bcce09dd7fd65a9e3a07179246daf05
SSDEEP

1536:focHCcZVYIUgnNizuQnXT8sH31WSfnxLPY:QcHCcrdUgNizuY9JnxL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4582ebeb7887dedcfb995cb78168867b_JaffaCakes118

Files

4582ebeb7887dedcfb995cb78168867b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

72385a557a38f80f59b692b31555af3e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetLastError
GetProcAddress

Sections

.rdata2
Size: 512B - Virtual size: 3B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.rdata
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 524B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 530B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ