4a92ac8edb6e63256eda641eadd4a47d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4a92ac8edb6e63256eda641eadd4a47d_JaffaCakes118
Size

111KB
MD5

4a92ac8edb6e63256eda641eadd4a47d
SHA1

3fa22e22a4e86fcf85bd9db25ab15b80d79a9985
SHA256

2932fa14c651bd743b930e7449c226e46f97b6fa87e78ad510a462f40fedbcb6
SHA512

47432136420e550b3e68cf69d797ce71458cbfe3d36de982e4f2efdc76c3b6e3a7e5fa88872c8ddc9f2fd6f34cd257239469acbc5ce4a80fed13ed4e00b289af
SSDEEP

1536:ZInkMeKa/DE3Al2D/nFIXynTLB7ydC1quRlNvZvoCWo9Jg1z:0eE3AccyTl7yQ32W9a1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a92ac8edb6e63256eda641eadd4a47d_JaffaCakes118

Files

4a92ac8edb6e63256eda641eadd4a47d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

61baba4c67ef78c036355386f53245c0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CopyFileA
Sleep
VirtualAlloc
IsDebuggerPresent
VirtualFree
ExitProcess

Sections

.text
Size: 512B - Virtual size: 254B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 193B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 101KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dsfwer
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ