4d86a6b1e4043c899803376d6e76667e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4d86a6b1e4043c899803376d6e76667e_JaffaCakes118
Size

110KB
MD5

4d86a6b1e4043c899803376d6e76667e
SHA1

3d4773322e9957696fa75b58a69191dded5117eb
SHA256

789956bc0b77eed7bd19e874c9a628f595b3d52eeb71d5471450e7b415a6d84f
SHA512

e492ee6e5855bd684bbeb2cb5f70086728b79cabe6fb35f08271ce56baf5e57782d26c2108ce0caa777dd670326f5c6650a888441a7ae0cd60c1f21f96e2ff0e
SSDEEP

1536:qOqyREpEzM85y5Bd5XOz4Af2+4J99n7fsSBeWvuSogDH0NmXFF:Duqy5BCFd8nVoW2Sps

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d86a6b1e4043c899803376d6e76667e_JaffaCakes118

Files

4d86a6b1e4043c899803376d6e76667e_JaffaCakes118
.exe windows:5 windows x86 arch:x86

44626fae7155013f6e56a8d09752d250

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
GetStartupInfoA

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 110B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 101KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 410B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ