460a3a52543ac5f17b1f5a7b15d39164_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

460a3a52543ac5f17b1f5a7b15d39164_JaffaCakes118
Size

896KB
MD5

460a3a52543ac5f17b1f5a7b15d39164
SHA1

fdc4b6166d9d7b259c1316d1ebc92a29ac294c34
SHA256

b9dcd9a18f083755d4c0b55c5a0eb97346d35e399b1d3df509c2e39fb8e6d74e
SHA512

ce618c47b7a64a338e50796274ee879ec4737704009c2f8973dc6878d7ea6fcd9f953f75fc6a32a39863972bc6b576a7152fb78187946bcadf07ee126de7ac03
SSDEEP

24576:MzLkDWY1H3XMkW3YiyzhalAP+XIqyjdMyY:MzWzcf4halAPnWb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
460a3a52543ac5f17b1f5a7b15d39164_JaffaCakes118

Files

460a3a52543ac5f17b1f5a7b15d39164_JaffaCakes118
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 878KB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE