46ffec1a9eccec5e60053d1a8042827e_JaffaCakes118 | Triage

Sharing

General

Target

46ffec1a9eccec5e60053d1a8042827e_JaffaCakes118
Size

88KB
MD5

46ffec1a9eccec5e60053d1a8042827e
SHA1

cf45634f9070751f742e3fffb588d2fe791a40bc
SHA256

d38e303ec7c7f065067e0e1a5db19ae936b36f56c5321ac06983bc3430c291ea
SHA512

0a769102f57d4c6469789afefcac495bff3f1e08907cae1fc79931c2e4bca6eda458f5ef63990e2c9bf722c205a00a4583fb71a34c41dae3b09e7cbad9a7deaa
SSDEEP

1536:ETH3B5uSl3z+r6APrn+u6Ju2CGBu2YaChAd1fryfka5QnT0mREnA0Ph:k3HuSlSrWhJ/CWu2dCqq6gnAY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46ffec1a9eccec5e60053d1a8042827e_JaffaCakes118

Files

46ffec1a9eccec5e60053d1a8042827e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

96aeca3c8a7ca41dc24840b117dd6634

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LoadLibraryA
MulDiv
GetProcAddress
InterlockedCompareExchange
GetExitCodeProcess
CompareStringA
VirtualProtect
ExitProcess
SetLastError

Sections

.text
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 177KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 198B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ