46740cd4b17371537462e3af35b3657a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

46740cd4b17371537462e3af35b3657a_JaffaCakes118
Size

23KB
MD5

46740cd4b17371537462e3af35b3657a
SHA1

2bab480a4758bd2024e8edaea3bc0ea5fba2217d
SHA256

f13782a73f0a77c5c21c88d7e22a5bbe846853ab5e8c3ae577ef6ee15260bc15
SHA512

f92ed6bcbe159f4014533be46df7be487ec10201958d18f13afba8d16fe51f4603eda32766eae7491c1a298e8e27ff3c440fb258fd39f4e734dc88f256eb7278
SSDEEP

384:lMgT7q3Ov8+alTYeUMQVFOZdLAyGqntCgSBILeZ/Mq4R+G9w7neyZ9hF0tc+fHSH:RkOSMek0dMyBn+qq/zeyZd0S0Hg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46740cd4b17371537462e3af35b3657a_JaffaCakes118

Files

46740cd4b17371537462e3af35b3657a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

88014bd31588d7d4567b8bbc5b690ee6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
lstrlenA
HeapAlloc
GetProcessHeap
VirtualAlloc
ExitProcess
GetProcAddress

Sections

.text
Size: 1024B - Virtual size: 775B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE