4c509ec8dc14c92d43259bfa9e432da0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4c509ec8dc14c92d43259bfa9e432da0_JaffaCakes118
Size

89KB
MD5

4c509ec8dc14c92d43259bfa9e432da0
SHA1

aa7a8eef1319be05df24f7bcb8e60b447ce3d2c9
SHA256

c810c40e56df9a6ad7c21b558aab671f5d86229c9b583291c81a4bc6fd286b6d
SHA512

8f0d2297acbb8e2947dfd9021770097b4171d7f66e3884de0830c217044ec81a8cba3172f7db4dbd1117139c039fbdaf5fb0bafc588a6b0b25502ae103939450
SSDEEP

1536:mDih3lUNNGSWHOCXl7+p7pBMDXO5Pnfg1QqdCDiUNFdWveYNq6h7:mDI1UNkrW7paDqfY1QeCDiQFMNvF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c509ec8dc14c92d43259bfa9e432da0_JaffaCakes118

Files

4c509ec8dc14c92d43259bfa9e432da0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

42168c3cc76297aa0e35a07be235d859

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_ISOLATION

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleW
VirtualAlloc
GetLastError

Exports

Exports

ewxcv
qazed
rfgni

Sections

.code
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 341B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mdata
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ