4b7db67b4b22836bd2e406660f5d715f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4b7db67b4b22836bd2e406660f5d715f_JaffaCakes118
Size

101KB
MD5

4b7db67b4b22836bd2e406660f5d715f
SHA1

ac35bc065c47402155a7d5d769e885b6fcc6f962
SHA256

8c6367b5f4073e40cf881c299266e3742ca19679bc6bdd6944a9b7331bdb46da
SHA512

4e097d3e8ac996adeb389e43e3d3d58726dcbf54aef36bfd86436992506d60114fac7520e7b2aed62b0d082ee637592d52aa97fe8d11f0a47ce52f548b5f1e10
SSDEEP

3072:E/OZU+ihDZGJVOSnfNHzHLz+UJLLIXXsUJLLIXXo:EmdzZfNTH/VJiXJi4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b7db67b4b22836bd2e406660f5d715f_JaffaCakes118

Files

4b7db67b4b22836bd2e406660f5d715f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

dbd4c5b52dda40e93a7d4185d69c0e1e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LockResource
LoadResource
FindResourceA
VirtualAlloc
GetModuleHandleA
lstrcmpiA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 410B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 95KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ