446867ff1c6e76303724940ee64266c5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

446867ff1c6e76303724940ee64266c5_JaffaCakes118
Size

19KB
MD5

446867ff1c6e76303724940ee64266c5
SHA1

3572037b859aa7c1ccba1d91edaf6844d16f8ef1
SHA256

0628aa08454d420f21e712d8c4768429a31c06404ce48c738b8a16a0257112fa
SHA512

681add92cfca588b582e5e8d8474f706998b697eef1001ef54802d77260a7d4bb3bc129402d81cd8f4e43c935ad5ee6390ed451f79f4e47f0178e0077966a024
SSDEEP

192:PnsZs6XNHKyTYspYrtf5lBYWJhEHoMHQkkXJndn9+q0LO5ExFkZh2fWIKPDajPkD:Pn6x0spYBJyl6zAq1ExaP2iPDx93aI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
446867ff1c6e76303724940ee64266c5_JaffaCakes118

Files

446867ff1c6e76303724940ee64266c5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

95aba95c84f753877b6261122d784f28

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetProcAddress
LoadLibraryA
VirtualAlloc
ReleaseSemaphore

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ