42793587e4e526f67c4e3bebaf94ebda_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

42793587e4e526f67c4e3bebaf94ebda_JaffaCakes118
Size

26KB
MD5

42793587e4e526f67c4e3bebaf94ebda
SHA1

3c3ab8473299510d490d88e6da3955cf412f668a
SHA256

d2f367dac470635f9802fe523718ddac8ed9dd3d6ed6020b9cfd52ef2f8b401b
SHA512

034b7968af84a4910dd51d1e7422a1c813d66ea98d9cd82e1c381aed756cb60106b0ec4c9308d1d5232c49966585d890bae3092cee33d8d0860dcbbba7d4511c
SSDEEP

768:lP2pjJ9nWoYnMBLvlZ5J4VU2luNe3g3/LSs:l4jJyG9ZLdouN7L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
42793587e4e526f67c4e3bebaf94ebda_JaffaCakes118

Files

42793587e4e526f67c4e3bebaf94ebda_JaffaCakes118
.exe windows:4 windows x86 arch:x86

36e6bef5d6abfe9bfab42553db0ab02f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetModuleHandleA
VirtualAlloc

Sections

.text
Size: 512B - Virtual size: 262B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256B - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 256B - Virtual size: 21B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.aaaa
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE