4d971d71a11ad0a13b6872c94666b179_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4d971d71a11ad0a13b6872c94666b179_JaffaCakes118
Size

170KB
MD5

4d971d71a11ad0a13b6872c94666b179
SHA1

63d5c79d9cc45cfe94c58fb3c6f90f9bf7d7d327
SHA256

10e6e834b3a3e2d7579f2e34c6c50ecb5afa88510a793462572a263b4949ebb7
SHA512

1f143b0f629c19fad35e1dd6eb197a67dbef58328306f1d56f5aac3bf8ca3bb88c9542e561031187e8314abc72549d82d431b4204060ae698e50062d233d5a58
SSDEEP

3072:vCu1j8BPOI5s8Dxnj8BPOI5s8DxoWFnXPck3TqUU4Tdv+GOG3:vJ14G7a4G7vWFXmyT5BZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d971d71a11ad0a13b6872c94666b179_JaffaCakes118

Files

4d971d71a11ad0a13b6872c94666b179_JaffaCakes118
.exe windows:4 windows x86 arch:x86

807d4dbf88522aca43243ab895fbef96

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32.dll.

LoadLibraryA
GetProcAddress
VirtualProtect
VirtualAlloc
VirtualFree
ExitProcess

Sections

.text
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

adad
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 107KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ