f2b91e707815aea7b2010cf8e8f6c47e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f2b91e707815aea7b2010cf8e8f6c47e_JaffaCakes118
Size

52KB
MD5

f2b91e707815aea7b2010cf8e8f6c47e
SHA1

3cf2db8292f0c4834591eb45c11d79bbd387800f
SHA256

a7aff2378a5538dd36de736928abf62c5993653fbcc6db6cc02644a24c53f6dd
SHA512

7b1de6de81f64d08a1c096e687b9a1d1101cbf171bd95055c36e9373d097fdd20b4cb8e801e84060470b8c4d36ccedff1d407ab8ef0720e2dec3a65e391537f2
SSDEEP

768:rgJT2zGXSBZdvtf94++1waAEB8YM1/6BwDr7rOLIqUFCYY6voaGoABsp0bXI4poY:rgZ2zGX+EzxBwveLBCCYzG1BrGTt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f2b91e707815aea7b2010cf8e8f6c47e_JaffaCakes118

Files

f2b91e707815aea7b2010cf8e8f6c47e_JaffaCakes118
.dll windows:4 windows x86 arch:x86

372cb1afc2a93c932bf474b9fcb8cb7f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LocalAlloc
LocalFree
GetProcAddress
ExitProcess
LoadLibraryA
GetModuleHandleA
VirtualFree
VirtualProtect
VirtualAlloc
GetModuleFileNameA

user32

wsprintfA
MessageBoxA

Sections

.data
Size: 45KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.asprl
Size: 496B - Virtual size: 492B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ