a4990286c0445472c8979bc30df73d24_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a4990286c0445472c8979bc30df73d24_JaffaCakes118
Size

110KB
MD5

a4990286c0445472c8979bc30df73d24
SHA1

369203378e3afbbf3910ecb81e1f7234c0ce2546
SHA256

071111c25a51838cfd10e2feede348eff3c943d2c46543463597ca453631d284
SHA512

902df610f7c438e8caeb886e728283948dabf3d451d6ea0f353c57620f78d51bb6767cb1cb0b1f4a6a3656253cefe59af532f07b247169169a548f6aca5c951c
SSDEEP

3072:3ysRsnQq5A/GnW3N+Jlvux70IpMjCxdXSTCr7pyWOY:3yLgGnW3N2K0IpMWTCCr7pDB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a4990286c0445472c8979bc30df73d24_JaffaCakes118

Files

a4990286c0445472c8979bc30df73d24_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b2ab9c868a88adb1bc668cb8d724d018

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress
LoadLibraryA

Sections

.text
Size: - Virtual size: 340KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 37KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE