048f17a110c914b2b656ae474e3457d3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

048f17a110c914b2b656ae474e3457d3_JaffaCakes118
Size

199KB
MD5

048f17a110c914b2b656ae474e3457d3
SHA1

ba081d61bb1cbeb386e0d0bf53dd06e784ff3dbc
SHA256

705c402f0cc4d11acb3ec0ca5e3e7544237a91f2ef3137c7a629f953b9d0ae05
SHA512

16b6bf9ac2103325eeb7d3f7c6731e33c5daef5f1123ea574a3014fc07eb2eb5c7bed57965545fe2b4a1958456cb05cc3a3060286387aca4da9f1bd1a42b8876
SSDEEP

3072:QZEMmPnHB6HSORK8lX66MiRW9wF/V7WEQFG/qOlr2xZu7nzne1QFdFNSlzR84SYA:Q9mIRKIXJMFy/x3gOlrY6TeuvJ4I6+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
048f17a110c914b2b656ae474e3457d3_JaffaCakes118

Files

048f17a110c914b2b656ae474e3457d3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0ee1e94ff5fc00d6471ba1745e730373

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

msvcrt

__getmainargs

user32

wsprintfA

Sections

.text
Size: 100KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 88KB - Virtual size: 92KB