4635c28b87d30b3bb286c053468f5a1b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4635c28b87d30b3bb286c053468f5a1b_JaffaCakes118
Size

299KB
MD5

4635c28b87d30b3bb286c053468f5a1b
SHA1

e53f199a83214281b2442ff359b2e365e082b7e3
SHA256

7feac5842e03608b4a125bd0d247d212abe3ea1a3f6a10ead7e93d2ddf620d1f
SHA512

ec13d2a243a51eaf0edb2e759e3a9ee22a273400d3da04834f5b6a516a39e08eed5d84224f2ccba08072241d044bc1b784578b015f3b22f6aac655fbad10a187
SSDEEP

6144:HgK5i9byRJ9a2eaVyjstlBRiMP+Z/VH8gm+QWL71rHAdxKJTXUIU+C:Hk9bP2eaV9tlsdcgmlMH5TXUMC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4635c28b87d30b3bb286c053468f5a1b_JaffaCakes118

Files

4635c28b87d30b3bb286c053468f5a1b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a77ffcc169693c0bd8d5363363c08001

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
TerminateProcess
ExitThread
GlobalDeleteAtom
CreateProcessW
EnumSystemLocalesW
GlobalFindAtomW
DeleteFileW
GetProcAddress
EndUpdateResourceW
GetModuleHandleW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 271KB - Virtual size: 271KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ