a4abc368c1520f23dce1bfcac6496fac_JaffaCakes118 | Triage

Sharing

General

Target

a4abc368c1520f23dce1bfcac6496fac_JaffaCakes118
Size

149KB
MD5

a4abc368c1520f23dce1bfcac6496fac
SHA1

549253ad371634e655c3be6215e8da0f50d66207
SHA256

6180a981f9ea6c7d723adf87d04fe21dffc9b5f5759603ea0f20764164d640f5
SHA512

da02cbaea5fa23760fd765a2ae2520ec2831cc8e465132941b82189f3a92dba739882c78be88bb9ffb6b466bbccb09ef44129e78336814217fdf5de9ab251f04
SSDEEP

3072:QwkZLpqNDYm06rBSyvBhPI8c1xic81e5HUs9bBAXIrm:Qw8Lprm069SyvBGZajM5Hx9W4rm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a4abc368c1520f23dce1bfcac6496fac_JaffaCakes118

Files

a4abc368c1520f23dce1bfcac6496fac_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b2ab9c868a88adb1bc668cb8d724d018

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetModuleHandleA
GetProcAddress
LoadLibraryA

Sections

.text
Size: - Virtual size: 380KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 74KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE