f4fd4a2668985d522929d2f9b70c9627_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f4fd4a2668985d522929d2f9b70c9627_JaffaCakes118
Size

168KB
MD5

f4fd4a2668985d522929d2f9b70c9627
SHA1

52bbffaf13687caaa92aff1efe35f99d9f4eb417
SHA256

799b0f492f79e46cb8e28ab942659bd975219b95affe8234daa5f6d57af5090d
SHA512

07916f55ef815451d583bd9e459973add6e8e449b329ec4d21234f203a5f80d7ac561b0d41c1460dc6cc0a3ef1afea0433a6804ee76c181e7548bcdf6501ce96
SSDEEP

3072:NlJ0UOUEVoigzuOiMII2GYFgF/BS3oi0pl1Om/M0ihMflQQnBBZLv:3JQVsuvZiYFg5BYAgytQQnrZLv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f4fd4a2668985d522929d2f9b70c9627_JaffaCakes118

Files

f4fd4a2668985d522929d2f9b70c9627_JaffaCakes118
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 13KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 144KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mpcrypt
Size: 512B - Virtual size: 4KB

.kiucryp
Size: 512B - Virtual size: 4KB