4b224b4af7b596a34ca7603215c913e3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4b224b4af7b596a34ca7603215c913e3_JaffaCakes118
Size

33KB
MD5

4b224b4af7b596a34ca7603215c913e3
SHA1

258f2c77ece5e74ab4e269d006d6479a0f1d6111
SHA256

726a0959933cb586fdd8191b44a2db05c0304b326f253220acda9d0a1542bce3
SHA512

3793a7c1eecc892e22d1e60e32e64b80c7a4bfc89a08eef5f9c4f7735d791250b52d3da915e99a93552049e3b3b0a1ab8b789853837663bac204d5845a673122
SSDEEP

384:nmrxjfTERio3HgH4+o+hTpK+VXE+XITQOTzzMi1i8g2EBSjvyS/uFrN9Nek+vvWN:gjfwRio3gJo+Jgf+YTrPziLbSNWhocj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b224b4af7b596a34ca7603215c913e3_JaffaCakes118

Files

4b224b4af7b596a34ca7603215c913e3_JaffaCakes118
.exe windows:5 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 23KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE