4b70bf0246b03e51620fd855aa39f2bb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4b70bf0246b03e51620fd855aa39f2bb_JaffaCakes118
Size

35KB
MD5

4b70bf0246b03e51620fd855aa39f2bb
SHA1

831b73e14ba7ca9e52a0327f7bbb2525755caa9c
SHA256

1033b0ba03496dfbfc52af443af1365cbc5148276eaff638f7687fbc70b7349a
SHA512

406b11835bcd269f45e0cf4513ad276bdc38df3ea61eaa9818a0ea8e98fed7556e8f1610a71c85af8c3d141a2a6431421e5a6cf688fa9bb0203c4a8e689fcef1
SSDEEP

768:UZ27kPkQYQMgRZ1LWuAP248rdeW+RvamvGvpbgI9dnE1tM7/:UokkrQ/jLWusZokvpAqb7Mj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b70bf0246b03e51620fd855aa39f2bb_JaffaCakes118

Files

4b70bf0246b03e51620fd855aa39f2bb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d58f292ffbd2b00fa779d18e5aac719b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualProtect

user32

CheckMenuItem
BeginDeferWindowPos
GetWindowDC
EndPaint
GetCursorPos

gdi32

LineTo
CreateCompatibleDC

Sections

.text
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pcle
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ