4bf923b60132c8ff9e28cc8c1e931438_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4bf923b60132c8ff9e28cc8c1e931438_JaffaCakes118
Size

3.6MB
MD5

4bf923b60132c8ff9e28cc8c1e931438
SHA1

58621c62f36bf29d1992dd4b54f2ea62c266e382
SHA256

19c15e92c9819d9cae6bf813041c2bf30986e553f015ce40c54bd9c61c5b6c47
SHA512

ffd3a297d4b2f30a2478b461aa0637972216921c3a5a198644ad97ca8607021aa24829ebc756d3a1f0e5dba0172455b1e27f47e74f4d8370d487856729c439b8
SSDEEP

98304:HAdx9y2heNNQTzJfC3XbZK4qBhjUVve6PVY2k:HIONZs4qBiNe6PVY2k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4bf923b60132c8ff9e28cc8c1e931438_JaffaCakes118

Files

4bf923b60132c8ff9e28cc8c1e931438_JaffaCakes118
.exe windows:4 windows x86 arch:x86

aa77d18b40072a7e1dc36630aafffd27

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
LoadLibraryA
VirtualProtect

Sections

.pqpmer0
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 5.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pqpmerd
Size: 3.6MB - Virtual size: 3.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE