f18405488a8de03c1bc42b57492e16f7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f18405488a8de03c1bc42b57492e16f7_JaffaCakes118
Size

87KB
MD5

f18405488a8de03c1bc42b57492e16f7
SHA1

e6cdc18c683fa0971c7ec9320ae4a61d598864e1
SHA256

637bd17332d97ac3dad8ecf4fcbf7566cf249367d2edae72ea9f3173e23fb338
SHA512

4df2bf1a2a752ff2bae09672c54fc72fef8bf03762a06280941df8d1e147e2527942b76a3bb2c05cf017d331335a7754686fe12d2401422ea6d1dfcb57f0c561
SSDEEP

1536:7URDy4056d2OWJXP94JxpoXSMHjFGu9+3ab7O0IxO+ZxKNtI+c8qg1GwoBSn:7Ul3VhxYSMD4X2O0uO+t+Bxn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f18405488a8de03c1bc42b57492e16f7_JaffaCakes118

Files

f18405488a8de03c1bc42b57492e16f7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f433e7fcc51e68080022754836705744

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

c.4ghcry
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 396KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

cyknlbu7
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

5vlgova7
Size: - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

qnf7j7yq
Size: 71KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

wkvjcuov
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ