4ace30e842dc403110ec20a266d55053_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4ace30e842dc403110ec20a266d55053_JaffaCakes118
Size

58KB
MD5

4ace30e842dc403110ec20a266d55053
SHA1

47e545e416dc0107583299b0132837bfe0a360fe
SHA256

d59d28023a9ec11eeec2aa74b0639b381261e848347c82225a3c0e7ff2ad4c2a
SHA512

bb25a9e215a9842302ad184e1ccb38d9ffd259b9ee0dd34cb61a9fbf1fef6fd310d1e1c12099f4f00a30bc67b8e8599d3b3014059492b140f968012ae7c0677a
SSDEEP

768:41tU1mqoUGix0s200pmwtQEIwcSlkoyKKrIBwQ2H3ktfa7UOALZCSTZ20+4S4P7k:UUtoUGiys200JtjU+fw/8fa7M0kjaV9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ace30e842dc403110ec20a266d55053_JaffaCakes118

Files

4ace30e842dc403110ec20a266d55053_JaffaCakes118
.exe windows:5 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 48KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE