4ab9f4362f432973ff3968f109e6b091_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4ab9f4362f432973ff3968f109e6b091_JaffaCakes118
Size

77KB
MD5

4ab9f4362f432973ff3968f109e6b091
SHA1

546fd0181745a808df13c1dca08bc8ef64e6e945
SHA256

1ae3aa1e63089d3a1501f56bf56ca04beae8cc64ca539aa8387a02e6c1e939f5
SHA512

3dba586c6c7506bdcac1e18e58edb7c0efc01a81d3b585569d1bbaf790f08e6a8bf7638a9fa18806e0f3a1bbb3eda0de55bfc9858842f1992669dff140023601
SSDEEP

1536:hJrx77RVBx3G11crq87qxAsbOzmTpwyYzs20mRuYWpMH7:h711oodWrOzmtIluYW6H7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ab9f4362f432973ff3968f109e6b091_JaffaCakes118

Files

4ab9f4362f432973ff3968f109e6b091_JaffaCakes118
.exe windows:4 windows x86 arch:x86

df03cdcd31346a5133a1319d89165224

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenFile
TerminateThread
VirtualProtect

shlwapi

IsCharSpaceW
ChrCmpIW
StrCatW

Sections

.text
Size: 41KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ