ad4429f689aa93fa45aa21c662890dce_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad4429f689aa93fa45aa21c662890dce_JaffaCakes118
Size

9KB
MD5

ad4429f689aa93fa45aa21c662890dce
SHA1

2373394a4d2d7f14ecc499f8bc8bd746f514f8c7
SHA256

bd4fb6cf72694ba24c5051329824ce89238229feffa85adc26cf7dc2d7e80af0
SHA512

ac552b00ac35714e2f7be6d21d036341c6c5ed13d6516cd50ad16c69f798dda46678bfccfbf0da52bfd1eeeefb97c67d72315d4da8c1c073484c32540a42e612
SSDEEP

192:FS4usSH7mlvEOgGKkYsgQPVHGLdS78U0L:6s87mlvzgt5FQtmkgU0L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad4429f689aa93fa45aa21c662890dce_JaffaCakes118

Files

ad4429f689aa93fa45aa21c662890dce_JaffaCakes118
.exe windows:4 windows x86 arch:x86

323250f2491b58f37bdb5e0f556eb2d0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsBadCodePtr
HeapFree
GetProcAddress
HeapAlloc
GetProcessHeap
ExitProcess

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 328B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ