4bd18dd34838f58e2fb816f33c5a2025_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4bd18dd34838f58e2fb816f33c5a2025_JaffaCakes118
Size

171KB
MD5

4bd18dd34838f58e2fb816f33c5a2025
SHA1

2289968f140ed361feb36f821c3fbc3f5f74e0c2
SHA256

1e2cc22301dc6d6c833b055834392dba3484b34d209a387b5bb30fdc4c3f3506
SHA512

1052c5a3324998bcb710c9e000b088af2cea3d49a15a56f58c0e73c4a7a2a922ab1fec780db94822fd626c3f5dedd5572e298c9b0df71412ec326e0e8c3ae47e
SSDEEP

3072:SkPA8wz58VCocv562vklG7qv/BynyiqS8vKnnH2ADvLOw9Idq:9PGz58VCo262vUxvJyyiMSnnWnw9Iw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4bd18dd34838f58e2fb816f33c5a2025_JaffaCakes118

Files

4bd18dd34838f58e2fb816f33c5a2025_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bd51a645a9c68bd03b2e51586e5cbdcb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rawdat
Size: 161KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE