4701b7814aaccfc27526c557cb4b318c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4701b7814aaccfc27526c557cb4b318c_JaffaCakes118
Size

324KB
MD5

4701b7814aaccfc27526c557cb4b318c
SHA1

38dc52c4c300a3690d94447be889e69a6855cf8b
SHA256

493cfb2c9aae7c5bfa581e4ddb92d57dee4b4ac8a1aaeca0c68b032f37fbf399
SHA512

ee71fb3b505d3e17be4ee8e5ca986cc58a7fae1965fabd0e0bb16859c63344dd2f84c173b7919313873564aa2daff2f6d28df825659ade8ea2fdacd7cf53708a
SSDEEP

6144:ZSTiWRi2boPntYy1iAAWfXbgZ6l0ouwy3D9ay2hg6lJDWU:pafcP5nFLgZ6K2y3DQyN6lJD3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4701b7814aaccfc27526c557cb4b318c_JaffaCakes118

Files

4701b7814aaccfc27526c557cb4b318c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

3377a0377f4a50f945549b620fd0c8b3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

QueryPerformanceCounter
GetTickCount
GetModuleHandleW
VirtualAlloc
LoadLibraryA
GetProcAddress
GetSystemTimeAsFileTime
GetCurrentThreadId
GetStartupInfoW
LoadLibraryW
GetCurrentProcessId

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 148KB - Virtual size: 147KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 142KB - Virtual size: 570KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 232B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ