f7384199d8a9d9c6f305f268f036ff56_JaffaCakes118 | Triage

Sharing

General

Target

f7384199d8a9d9c6f305f268f036ff56_JaffaCakes118
Size

71KB
MD5

f7384199d8a9d9c6f305f268f036ff56
SHA1

36aff61098cc4e7c9eb9ce6d014bf9973d1b2fff
SHA256

7e7d9d4437affab66edc82403455e3210f661cbd76b0c504fb6f9befdd8306f3
SHA512

b8f63c0e8107f3e93f0b22b46cab682a839438c64b68a7909192522bb1d1caffe54836ffb59dd6dbd9e0db3f105064ddfc786e0e6f369c36b4bcac614f71e21e
SSDEEP

1536:sV9ZM5xJVgFZRhTlFfnFMgWy3mxpwG6P:STMJ0hTlFf6Py36pB6P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f7384199d8a9d9c6f305f268f036ff56_JaffaCakes118

Files

f7384199d8a9d9c6f305f268f036ff56_JaffaCakes118
.exe windows:1 windows x86 arch:x86

e2649837c59f87885ca4eb82bebd799b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
VirtualFree
GetProcAddress
EnumSystemCodePagesA
GetModuleHandleA
ExitProcess

user32

DialogBoxParamA

Sections

.code
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 282B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ