00b43e26a02ccd948ac33a773afa9740_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

00b43e26a02ccd948ac33a773afa9740_JaffaCakes118
Size

441KB
MD5

00b43e26a02ccd948ac33a773afa9740
SHA1

0c52f993e50d33cc4a97029ef9744e5f5ee7cb8f
SHA256

8e65bb92b99546828e33e76a12eeab0539c8ef62be785effb65090b5c0ad25d8
SHA512

70ecdcfe7c2943b22a332d9eef3e9566cceb8391729d367a4915a5858b79089397a18bdb81e138dadbe4f9ea4dbbac5980bdaa0fdb56df15f72a97bb166cec72
SSDEEP

12288:uidio0rUR5V3mwYseZoWc0prgNn1j1zCRnI95:u8ihU/V3iseZ5cnjAI95

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00b43e26a02ccd948ac33a773afa9740_JaffaCakes118

Files

00b43e26a02ccd948ac33a773afa9740_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f433e7fcc51e68080022754836705744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree

user32

MessageBoxA

Sections

.text
Size: 152KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

69kjejce
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

2kmrkbrp
Size: 216KB - Virtual size: 220KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

a1ggmw7g
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ