012822f0f44d0e4c2659f3fcfff85d72_JaffaCakes118 | Triage

Sharing

General

Target

012822f0f44d0e4c2659f3fcfff85d72_JaffaCakes118
Size

23KB
MD5

012822f0f44d0e4c2659f3fcfff85d72
SHA1

5966b73f4d39d5ea312bc9acc5068c8d42088a4e
SHA256

08ab91c3184a782e792c333f7ac789aed78cd3fe8500947c4c7e78f750800854
SHA512

c10129ca0559a17bb9c5b40342ac6b9680fb54ae3ada49374c5a9933c3d945d55c341ceee0cf1520cac3c2e7065f92a258c12deaf3720e03a9350052ad3db521
SSDEEP

384:0c1zCS+1LPrSOBxk9Db87YnQ8tMyamgORZ4zw/UygkCZps5NmYkjKJ49obQp:X5f+1KOBqbIYNMyamguj8pImYkscD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
012822f0f44d0e4c2659f3fcfff85d72_JaffaCakes118

Files

012822f0f44d0e4c2659f3fcfff85d72_JaffaCakes118
.exe windows:4 windows x86 arch:x86

99f5b0b723d6fca2813f516623081e1c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
ExitProcess
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
FreeLibrary
GetLastError
CreateMutexA
LoadLibraryA

user32

wsprintfA
MessageBoxA

Sections

.data
Size: - Virtual size: 292KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 352B - Virtual size: 352B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ