4c7fe02454f5b185db7dc614463dcfc8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4c7fe02454f5b185db7dc614463dcfc8_JaffaCakes118
Size

422KB
MD5

4c7fe02454f5b185db7dc614463dcfc8
SHA1

b90baf74cccb99f22bc557f10ff716844b32271e
SHA256

73584368ac5c5328fe7e0a7c479f6d45350ff3cf6ffc7407b3d46516c1dd6a74
SHA512

6a85f6622cb444cdb8a910d712ca2ed4604c5777fe506f272eb527213cb210515a18ff4e156d3302c066d340d762f7344a23810262e045e0021c3278a81d33c9
SSDEEP

12288:KRONXmmzgIaHTtbQjMEn3MpPIJT4gr23i:lNXDgIaHTDPxgV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c7fe02454f5b185db7dc614463dcfc8_JaffaCakes118

Files

4c7fe02454f5b185db7dc614463dcfc8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5265396cce55c7fc139786d860943929

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SwitchToThread
GetProcAddress
ExitProcess
TerminateProcess
GetModuleHandleW

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 404KB - Virtual size: 404KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ