4606bee03ec859cd4c0c744b87010979_JaffaCakes118 | Triage

Sharing

General

Target

4606bee03ec859cd4c0c744b87010979_JaffaCakes118
Size

88KB
MD5

4606bee03ec859cd4c0c744b87010979
SHA1

a3ffb86c4b6c974adcf82be770342567c01747ba
SHA256

9cf2172097c1a07c9fd108d3aa877cd057a76cfa01542d2f89a4dd0e7ea03fe2
SHA512

4095b6176debf78bfb7f3af87eec3b47f897288122696c4c9c1453cdbf1eb4003001694dbd48ce312edff6fb6d0c0b1bdff8f9ecc52e8f57879e0de696420bac
SSDEEP

1536:UHgNRnOXly4nB8G/wSc509/djYWUcC9K2H2tTXdNHSOMl2Au:PN0PnF/GcdMgCQ2H2tTXd56l2Au

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4606bee03ec859cd4c0c744b87010979_JaffaCakes118

Files

4606bee03ec859cd4c0c744b87010979_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bd51a645a9c68bd03b2e51586e5cbdcb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
LoadLibraryA

Sections

.text
Size: 58KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_MEM_READ