4a839c12fdcd0a82aa0933a81340fbfa_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4a839c12fdcd0a82aa0933a81340fbfa_JaffaCakes118
Size

56KB
MD5

4a839c12fdcd0a82aa0933a81340fbfa
SHA1

87cc35972cf8f5589b75ecdd7a752af8b4fa1f43
SHA256

9b2ab0633fb1c483136ca7b4bbc8887bd5e2393fe9ae8c2f9f30e2c0fca12d42
SHA512

9bc47c21a44dcb7a1aebd7a16d1d859d901c2e5929caf247a343422d53124c5550b706765850cb8e841e6ffc5721774d4addd5e57fc5bfd3bf3f2cc4dd83f3e0
SSDEEP

1536:6TdytmznUkJTbcBPQtXCUP5rKdQz4nBxP5l8rDjE:Udy0znnbpDlszA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a839c12fdcd0a82aa0933a81340fbfa_JaffaCakes118

Files

4a839c12fdcd0a82aa0933a81340fbfa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

87bed5a7cba00c7e1f4015f1bdae2183

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 72KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 48KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE