b843cc6c8c6d0ee76f724a4d3325b3e0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b843cc6c8c6d0ee76f724a4d3325b3e0_JaffaCakes118
Size

2.3MB
MD5

b843cc6c8c6d0ee76f724a4d3325b3e0
SHA1

c150c0ec29611f1ecf072e7a312636688cb81d95
SHA256

5ac96798c1713befa8dc464e93eba962cf17ff017f2d0986f47ab1b116adc1cb
SHA512

47d07d76e8c0291257b15cb52dc22e6f7e4b1f728530d9b3713dd5340333bb2a140d900957bc5b761c4571ed8dafb5612d3eb047a77caa8ec5f9e7016aea28bf
SSDEEP

49152:AHE1yeNXd1Tkayq7mKKfctjDmc+f9kh9dHyd/uJRmq+Rkva/Huw+Ye8pmF+3qowq:CA4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b843cc6c8c6d0ee76f724a4d3325b3e0_JaffaCakes118

Files

b843cc6c8c6d0ee76f724a4d3325b3e0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5123b3726c84db1447a4ba81a3392c30

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetKeyState

kernel32

LoadLibraryA
GetProcAddress
ExitProcess
VirtualProtect

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 365KB - Virtual size: 367KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 190B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ