4a1b3be2bb1f3144ce15a1f6db7f16c0_JaffaCakes118 | Triage

Sharing

General

Target

4a1b3be2bb1f3144ce15a1f6db7f16c0_JaffaCakes118
Size

303KB
MD5

4a1b3be2bb1f3144ce15a1f6db7f16c0
SHA1

0eeecc72a112845be8a954854f56a12e59865cd5
SHA256

c4b3a3034a361bb1d06b79a0e679eb5acadf6e35d881f360eba9d42f5e5d0c16
SHA512

bda8cd6d853d51757f99775c557f76daba118c8a274c7092ecc6a714b760fe4a2263d6e288bcf9b60dc620c987c33498b55ca54e7fb904f83d92fdd002f2f205
SSDEEP

6144:bmMtm3Ak6UwrQ9tYck6z+gcpIyQIVRrnCuwTisgnrHr/z:bttymQ9tYckp7xxRrCvm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a1b3be2bb1f3144ce15a1f6db7f16c0_JaffaCakes118

Files

4a1b3be2bb1f3144ce15a1f6db7f16c0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7a7803027531302026dedc7b5f6025f2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress

Sections

.text
Size: 215KB - Virtual size: 488KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 22KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 11KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 33KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE