4da7dfc12f99ded28db465ba325517c8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4da7dfc12f99ded28db465ba325517c8_JaffaCakes118
Size

294KB
MD5

4da7dfc12f99ded28db465ba325517c8
SHA1

166665187d1ec1f4817e2ee304184a0910ad74bb
SHA256

1fc7661bb260f59d3df58c7d8fedc400cab59a3af38d1e7ce1ecee7ef8ea2510
SHA512

51b536f20070fc13478f639bbeda5d3c0f0c505471593cacd50b08a7694c9a9e92c8f8ea7323156458173eb2e46096249cb8343f0a128182916987a8bad5e7b8
SSDEEP

6144:yvd/T0ycl4cqOR2jqPmEcmvU3vXsnmZLKh8iP:yF70HGcAEspLKyiP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4da7dfc12f99ded28db465ba325517c8_JaffaCakes118

Files

4da7dfc12f99ded28db465ba325517c8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2717a120f3532759192746b08a75beea

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
VirtualAlloc
VirtualFree
VirtualProtect
LoadLibraryA
GetProcAddress
CreateFileA
WriteFile
GetEnvironmentVariableW

Sections

.text
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 324B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 218KB - Virtual size: 218KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE