4c7bd544889e1af372c7363d860ea514_JaffaCakes118 | Triage

Sharing

General

Target

4c7bd544889e1af372c7363d860ea514_JaffaCakes118
Size

57KB
MD5

4c7bd544889e1af372c7363d860ea514
SHA1

e015f5c135a3d5b691f98c4687b93b121a17da72
SHA256

c371aef5aca9a70c988f0c1e9fe60a7cd582c7b648decb4586097575dc8e1c21
SHA512

8543c4c0908a8b95d6e61dc0a2f1c91fb72a6fd3c9db40fc6c4cc4dd4c5642de53a9a3d6e65060910516dc8a0e372db24c371281e2d7761fea35362215921a7d
SSDEEP

1536:Teqb0hkwu3xKz8kaoxr6QcFCkwu39z1kc:c2xwyoO42E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c7bd544889e1af372c7363d860ea514_JaffaCakes118

Files

4c7bd544889e1af372c7363d860ea514_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5be829cbd9bc15fc84a03fe8cb0491b2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStdHandle
GlobalFree
CreateThread

user32

GetFocus
GetMenu

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 63B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 217B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ