4dc3cb986e2779ff6ebd295a9cab2d0e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4dc3cb986e2779ff6ebd295a9cab2d0e_JaffaCakes118
Size

83KB
MD5

4dc3cb986e2779ff6ebd295a9cab2d0e
SHA1

a8bcf6f612442b54d0a7e944c30e279a9988bad3
SHA256

9235e766c4e4e42e25a19f4b3a688825fd4d1a81bf6fc9e64734186f978c5942
SHA512

898ec39d17075adf013dfbfe9a08f12d067900b84a8975d366ea1861ee8edc7ba907c64b3b7f734c1c96f24af8d064187e59ec3f46ca35dea1500ca7d69d0594
SSDEEP

1536:LOfOGM/csxDbOF9cGumy8PviDyFoS1SQAsoqkwxr0RmPR4yCWtojCDE4rzp3c/A:LOM/TfOFSGDJ6yFT1LALLQnjtouEsM4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4dc3cb986e2779ff6ebd295a9cab2d0e_JaffaCakes118

Files

4dc3cb986e2779ff6ebd295a9cab2d0e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5e961f4152ced0892ce68436c0876364

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
FreeLibrary
GetProcAddress
LoadLibraryA
WriteProcessMemory
VirtualAllocEx
SetThreadContext
SetLastError
GetModuleHandleA
GetThreadContext
ResumeThread
GetModuleFileNameA
LockResource
SizeofResource
LoadResource
FindResourceA
HeapAlloc
GetProcessHeap
HeapFree
WriteFile
GetStdHandle
ExitProcess
lstrcpyA
lstrlenA
GetCommandLineA
TerminateProcess
GetCurrentProcess

user32

wvsprintfA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 782B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 852B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ