46b51bfce3007e9954bfd595dea08cfb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

46b51bfce3007e9954bfd595dea08cfb_JaffaCakes118
Size

182KB
MD5

46b51bfce3007e9954bfd595dea08cfb
SHA1

39c7d52154b55644970d88e737f7a2449b3bfe7c
SHA256

56a09d7350651b6b691d0b52f02bfe8be96f44e89041c84863ac85c98078fd33
SHA512

dd3a746436f3da582ee022a5b60877ed6b9ba7eb7499869e6cc81bcec22f41988c3d9bcf6b1f87de85ebbc67b65920ede7f444e2ab13ceff8104d1120922f92f
SSDEEP

3072:7oMgCmZnYjbfyNCzaa1yc5X/IVSVaoNZZ2Q9COBpQ6EWe3R:v2nY3fGCzaa17dVaoh2Q9e6E13R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46b51bfce3007e9954bfd595dea08cfb_JaffaCakes118

Files

46b51bfce3007e9954bfd595dea08cfb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

87bed5a7cba00c7e1f4015f1bdae2183

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress

Sections

.text
Size: 1024B - Virtual size: 952B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 178KB - Virtual size: 178KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ