a4ce5efdfd0c91022657b2b9a94ef301_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a4ce5efdfd0c91022657b2b9a94ef301_JaffaCakes118
Size

77KB
MD5

a4ce5efdfd0c91022657b2b9a94ef301
SHA1

7f46eb7e085400012395f48c667cb6a9b0bc8518
SHA256

cae80313c243478e23585b87a189bc89969a9b2417a64897c1fe22aa516347fe
SHA512

383df4ac4fe9bc4b6554152168d3804c97fe7c120fa3529ac312d2b0664c4313c5ac40bb6bdf00d327fb515bd9e0d3d0d1940da1ce964fa6a65012e02624b46e
SSDEEP

1536:0QC1mxCFvsOolQpAASX8CONjQdn0pGzCxqYLMZcs20mRuYWp:0QzC1CQeQNs/zNIluYWp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a4ce5efdfd0c91022657b2b9a94ef301_JaffaCakes118

Files

a4ce5efdfd0c91022657b2b9a94ef301_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3f6053f65448b1765cb795e83e5879ce

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateThread
OpenFile
VirtualProtect

shlwapi

StrCatW
IsCharSpaceW
ChrCmpIW

Sections

.text
Size: 41KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ