4ca281db93a9e9dbe0057a659ea6e658_JaffaCakes118 | Triage

Sharing

General

Target

4ca281db93a9e9dbe0057a659ea6e658_JaffaCakes118
Size

173KB
MD5

4ca281db93a9e9dbe0057a659ea6e658
SHA1

d89c000c7cf572feb9c2aeb55ada55d33f22b5cb
SHA256

28efbe3b79bb3a6b58787cd223d47e465e8edbdebb59528b7fb736afe1ed38b7
SHA512

519a0447ebe9c9337b4f7771ffd2b5cb6c988a6d211abc151b55c8ce890c3b6728243cbeb08322c544c2845cc0535c3639fd7001e54c5a27eefa7e5ef70ac6ba
SSDEEP

3072:5rttRVTxvzOjjQ6m74axy4MVR+z4U0Schh5g/x2R4ExBV4HH:5ptRVTR0k6c1MVRA488g/x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ca281db93a9e9dbe0057a659ea6e658_JaffaCakes118

Files

4ca281db93a9e9dbe0057a659ea6e658_JaffaCakes118
.exe windows:4 windows x86 arch:x86

87bed5a7cba00c7e1f4015f1bdae2183

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress

Sections

.text
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 67KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE