e99b0229685c3de5a6a870f9fac4224c_JaffaCakes118 | Triage

Sharing

General

Target

e99b0229685c3de5a6a870f9fac4224c_JaffaCakes118
Size

492KB
MD5

e99b0229685c3de5a6a870f9fac4224c
SHA1

735dfb26afcc62a405cde0d44b4f4d67a7e52091
SHA256

4f6669cac1b9ded083c49a485a1d44c51bf0df59f1a099a804f38321f5f6493f
SHA512

e8b3d8482efa8e29d562e517b3887a7f24c633f0fa3e3a6aa1319a08e3602aca2e94fe414e8d9ee51ccf6de7d78ae22d8b278a30a35fac8e95e142424f7b0902
SSDEEP

12288:CHkbAGrCC4Q2H++HnU+AFaKsE+5RZK+MmlQ3RmHeLer//N:Z0RC4Q2H+aU+zs+rDY3ZLiF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e99b0229685c3de5a6a870f9fac4224c_JaffaCakes118

Files

e99b0229685c3de5a6a870f9fac4224c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

99f5b0b723d6fca2813f516623081e1c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualFree
VirtualAlloc
ExitProcess
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
FreeLibrary
GetLastError
CreateMutexA
LoadLibraryA

user32

wsprintfA
MessageBoxA

Sections

.data
Size: - Virtual size: 996KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 481KB - Virtual size: 481KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 656B - Virtual size: 656B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ