4c0f1deb83b4ab86bf0a0f3675d20946_JaffaCakes118 | Triage

Sharing

General

Target

4c0f1deb83b4ab86bf0a0f3675d20946_JaffaCakes118
Size

127KB
MD5

4c0f1deb83b4ab86bf0a0f3675d20946
SHA1

2af4388dfdf69d06a317e600106dc07722be4d7e
SHA256

3de2d46c6b0473fbe6100fa79af36492172737c846a6bd5ca6fbf42b32617199
SHA512

1c5941ca198473f77ee9a159ed9beaab9763c6f27bb7761ec337325fca756e66ec71ed283bd4960b8f4963edbf6d62b0c4576dfd84b44b9489194476eca97a63
SSDEEP

3072:A2wB07c5DGbA7WpUKAcoumI1bpJDYmINLZJey9u6O6T:AXB078DGbbUKA9hI1bptzGNskug

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c0f1deb83b4ab86bf0a0f3675d20946_JaffaCakes118

Files

4c0f1deb83b4ab86bf0a0f3675d20946_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5a1138d94b54c5a16e336f57dc47a7ad

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitThread
GetProcAddress
LoadLibraryA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 134B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsdat
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 511B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE