4b95c71e690123ef989ffe7fe87330b8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4b95c71e690123ef989ffe7fe87330b8_JaffaCakes118
Size

1.3MB
MD5

4b95c71e690123ef989ffe7fe87330b8
SHA1

abe1edda09654dda8221a78528a2af41a9313928
SHA256

faf3a3a1c328a5ae5a5fb1f0ad33ee05304387f288115c45f0a1a6f18e1da829
SHA512

ed27019b3fec78424b7e2a4d246d414b5ad3a3bf3c1e40cc1a2a71b3006e463c95374043335e548761ae23c2c1d7724e4f47041167610b72392b86f9fd5491d2
SSDEEP

24576:ptp/myb97s4zngLIKGFIRdsPxmsbr9LqEyBxP6BBmKdif1BwWQSDD9y/VrN1:pthmyb97s4jgLIKGFIRdsPxmsbr9LqEL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b95c71e690123ef989ffe7fe87330b8_JaffaCakes118

Files

4b95c71e690123ef989ffe7fe87330b8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f1fd04c31b0fb5128f2b645477a0d461

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
LoadLibraryA
VirtualProtect
GetProcAddress
IsValidLocale

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 233KB - Virtual size: 6.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 258B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ