4a95ffb44c7bc95889c0cd898af98256_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4a95ffb44c7bc95889c0cd898af98256_JaffaCakes118
Size

16KB
MD5

4a95ffb44c7bc95889c0cd898af98256
SHA1

4f7918b333343e5720b75f12edf89af3a4e868e0
SHA256

449a62cadd16ae927694922a9400cf0be993cb96efcf0b1c39c454e7e8c99544
SHA512

2828d13c67816f0daf6e4da88ccf887cc41d8f14dc67a515b4c5c28b3aa640a8e9a335e9609f794c92bd60c3ce748483a17a74b6209b023d4750ea00e9013542
SSDEEP

384:I3jIRTX7/QQZONaSdr0qsxBf0Q3V3CMv:I3UL/QkAdMx504V3CMv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a95ffb44c7bc95889c0cd898af98256_JaffaCakes118

Files

4a95ffb44c7bc95889c0cd898af98256_JaffaCakes118
.exe windows:4 windows x86 arch:x86

945e255a084395f9d23c911601a06056

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetProcAddress
LoadLibraryA
SetUnhandledExceptionFilter
Sleep
VirtualFree

user32

GetMessageA
KillTimer
SetTimer
TranslateMessage
DispatchMessageA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 368B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE