4370b5acc49a6cc3d1ef1d75845da8e5_JaffaCakes118 | Triage

Sharing

General

Target

4370b5acc49a6cc3d1ef1d75845da8e5_JaffaCakes118
Size

388KB
MD5

4370b5acc49a6cc3d1ef1d75845da8e5
SHA1

51388c056ebd2f3a7cd0dcf939e65fae6e6a14b5
SHA256

9a863a99145f07d18d8e2ceaf093f5edab6b912e9e58a4bdd5f4c70d5c70d3b4
SHA512

ebb774832a48ce8ddbac6845bd4400af40f59c95afe523cdf325bf6188f0f8fe37dae4fe05eb3c6b61e93ec3d137fb322c57e3ac61cd3f07344f19fc991ee75d
SSDEEP

6144:/E4yN90mph+rG5YHS2BuBErqHa2uyUXHB+14PsXn5j/yN903bIn4:/y90g+9SmmErV2qHB+asn57A903B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4370b5acc49a6cc3d1ef1d75845da8e5_JaffaCakes118

Files

4370b5acc49a6cc3d1ef1d75845da8e5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

95dd8565ca0bfb2d2d6ae9b23740c4e0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA

Sections

BitArts
Size: - Virtual size: 237KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BitArts
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BitArts
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BitArts
Size: 82KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE