4b189df7fc96dbf7c61b7ed041a26760_JaffaCakes118 | Triage

Sharing

General

Target

4b189df7fc96dbf7c61b7ed041a26760_JaffaCakes118
Size

288KB
MD5

4b189df7fc96dbf7c61b7ed041a26760
SHA1

442cfa44a1ff57a4c23bdf491debfb560ba23327
SHA256

92b6660fda42cbc5b17aecd196fefb5889adea4b4794f484cf6bafa9b8398bb6
SHA512

b170c232709beb34eb622b2f0196ac0905fe10e35475618b098bb0370d3d126885864ad6f67cd3fc60987f24810e3f720d87537326a0ffcfaa76598169b3b9ac
SSDEEP

6144:KFzFNj+UWnJEK7X52+7+nj4Z7k1u8nQ9sB0nCQR:wzFNj+VnOUJ8KyPnQq0Ca

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b189df7fc96dbf7c61b7ed041a26760_JaffaCakes118

Files

4b189df7fc96dbf7c61b7ed041a26760_JaffaCakes118
.exe windows:4 windows x86 arch:x86

750bd2bf1e6344af28b56183714695f2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
GetWindowsDirectoryA
CreateFileA
lstrcatA
CloseHandle

msvcrt

memcpy

Sections

.text2
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 285KB - Virtual size: 284KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ