141c5630605177fba7199811e7ee2acb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

141c5630605177fba7199811e7ee2acb_JaffaCakes118
Size

41KB
MD5

141c5630605177fba7199811e7ee2acb
SHA1

695a884d98900809ad87dab1add08e6c27ffe1e6
SHA256

d6eaea633478a34e85272a7e341f016c02b76df4bcf1f56589fe90373f50663b
SHA512

adf0aa49a441004680d3370e9a8a6df0e2f29aa2ff8c5d5ddfc4ef0ccf63c71513611e3d6e1e89e1ae2f962f6d17eda7e953deabcc04e54f239d9040e85d43d4
SSDEEP

768:wJ95gxClPa5mZ19kQ+Hj/y2LqJ+GJF5gEubBpbo8tBRy9K4aIfvnQVh9QQ/3:wJAwzkQ+HjK2LLGJF5gEuTbq96IfPgf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
141c5630605177fba7199811e7ee2acb_JaffaCakes118

Files

141c5630605177fba7199811e7ee2acb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

074745fd9ff3eae0e009c32dd12c5041

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleHandleA
GetSystemTime
GetTickCount
HeapAlloc
GetProcessHeap
HeapReAlloc
HeapFree

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 364B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 206KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 736B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ