4a0433e3b5048ccf6169dacb441e5b8c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4a0433e3b5048ccf6169dacb441e5b8c_JaffaCakes118
Size

1006KB
MD5

4a0433e3b5048ccf6169dacb441e5b8c
SHA1

9cfb80e96cb8b9951923547f22b93d048cc584a3
SHA256

6eaeb1e7de1a8ec91f7e73bedbc97e79798ee548f433cb552caade80fe3e7226
SHA512

f0ce4a7d3826cdabe28356428a495e3f4f2f2243856eaaf41e1013c51cee3416ceed452c981d10c466a6b237f963197d060a576e9cb1b52c864dca437943b218
SSDEEP

24576:RZE4rW75cQzfQ8EcjgS1OOu7bFA/56TvwQLyPInOrNA:RZEncQzfBg49u7bFA/5Za5ONA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a0433e3b5048ccf6169dacb441e5b8c_JaffaCakes118

Files

4a0433e3b5048ccf6169dacb441e5b8c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

19d3fef1f5ed3a2d53ee8a9c8d82f6ae

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA

user32

GetInputState

advapi32

GetAclInformation

msvcrt

exit

netapi32

NetUserGetLocalGroups

iphlpapi

GetAdaptersInfo

psapi

GetMappedFileNameW

Sections

.text
Size: 65KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 935KB - Virtual size: 936KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ