b4fc3691f7feccecc469c711e64ce19b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4fc3691f7feccecc469c711e64ce19b_JaffaCakes118
Size

49KB
MD5

b4fc3691f7feccecc469c711e64ce19b
SHA1

ef33957f5958171e6b09df71872be983ce0281e1
SHA256

406e33a97501f4462fc4ea67c1c28f6224c25a3960c6ae03b9e542b0c33d7fd9
SHA512

1dee29c6bacb522a6058966cdd21b9e0b37300d9718d0aa9fe9ed1b5ccef9c7568dfd3d85b90fe597c0230e1890e1e2898c143a592f73a897d17b8313c370bf8
SSDEEP

768:O0RSOezvxRR1QzMNAvMZggAOQQ/IPdnwdtykpARUZAxdWNVRBvL7GvRiHaLzVyJT:Vkd1QzM+MSz+3dqRkhBvL64a3b70h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4fc3691f7feccecc469c711e64ce19b_JaffaCakes118

Files

b4fc3691f7feccecc469c711e64ce19b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5a498eee87e4d89512a84502f500181f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
LoadLibraryA

Sections

.text
Size: 28KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 990B - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.teraphy
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE