4fd155e00d4bc07b165c02bdcc4c3522_JaffaCakes118 | Triage

Sharing

General

Target

4fd155e00d4bc07b165c02bdcc4c3522_JaffaCakes118
Size

728KB
MD5

4fd155e00d4bc07b165c02bdcc4c3522
SHA1

519f3a5cf6e61a1a3dc372b2c8a865719440c463
SHA256

6f94b4cbd37916ca679dbbac53afffc691c6dd5330245b593cdb8302b2a1c31b
SHA512

eb09cb1a4c6b5ec5fe12c5d92a12c3f86a46434579d3d4750681a6cf8f626e196de71f8a4356392cd75ad3ce1009faaa694b9883c759d3ec2c1effec812f2279
SSDEEP

12288:5GhEc9biObcDEMUkuBjnauDJe0KIPbx2toHHzS0MS0misSORycGRV:5FcMObcDEYUreKPbxJe0MS0misS+ycGf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
4fd155e00d4bc07b165c02bdcc4c3522_JaffaCakes118

Files

4fd155e00d4bc07b165c02bdcc4c3522_JaffaCakes118
.exe windows:5 windows x86 arch:x86

79d93aa3af0427e5b6c41bff8974404f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapFree
HeapAlloc
GetProcessHeap
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 824B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DVhVSMeb
Size: 512B - Virtual size: 371B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

yitzvGXY
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 230B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 713KB - Virtual size: 712KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ