46af741f7d08501bb88d894153cdb9e3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

46af741f7d08501bb88d894153cdb9e3_JaffaCakes118
Size

2.1MB
MD5

46af741f7d08501bb88d894153cdb9e3
SHA1

7bf3b2afac8d1fad25ac32ac407d0629966e9a1b
SHA256

4d44929c7f30f8c9dcdf3ae51b9f76adf5a8a154961eb34f4be977feb06d2764
SHA512

bdd8f8df86b3aace6fab41ce8d9e8baaccf602528a5b25c71d2a3220e1c00db241eaf488591588a8d95047078f9d293eeedb166e64735b3aa6ab8de44346352e
SSDEEP

49152:qnG7jZ9LX6ubC5zKhpHF/CN+Y5NMOdr1kP6VvSuZQlqebRnkNf+JNSEacucg:H3Z99JQ5Nd1kP6VvSu+lqe1k0cRp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46af741f7d08501bb88d894153cdb9e3_JaffaCakes118

Files

46af741f7d08501bb88d894153cdb9e3_JaffaCakes118
.exe windows:5 windows x86 arch:x86

5ba65a81bc80e681a83f2a5dd2ba25b3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32 rasapi32

GetCurrentProcess QS)

Sections

.text
Size: 380KB - Virtual size: 960KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ