4a1908e7087e79f4f237c857eb333464_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4a1908e7087e79f4f237c857eb333464_JaffaCakes118
Size

207KB
MD5

4a1908e7087e79f4f237c857eb333464
SHA1

22ffc7eb7d8b323d8178af52895d843ae5530a96
SHA256

8e0c99c26bdbf88046dc91dc711e58fb15bb460ac51e0ee5c5aa437cfea99f9c
SHA512

1ff940a4da1ad9bd5297205bbc27903b8cc727247e6e0c65e9fbc15c16ec7020d728504eb15ddcaaf44ed697fd8bee8d3c79717a732e60cd63161256dbc366aa
SSDEEP

6144:QtuDAoSxLs2caRxWtLpeJvj5WNAD74Ebq0o37oLA7HU9b:QtuDIA0xWtl40NAD7ZWTGb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a1908e7087e79f4f237c857eb333464_JaffaCakes118

Files

4a1908e7087e79f4f237c857eb333464_JaffaCakes118
.exe windows:4 windows x86 arch:x86

29bd810f448a640871ce275f73c6c03a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
SetLastError
LoadLibraryA

Sections

.text
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 161KB - Virtual size: 161KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ