00402ae76dcde2dc54fd1f8ba1691487_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

00402ae76dcde2dc54fd1f8ba1691487_JaffaCakes118
Size

438KB
MD5

00402ae76dcde2dc54fd1f8ba1691487
SHA1

ace1a3c9ea7bf8a957f51b5723cf1ef0590630a0
SHA256

ac492748333ec9ddd9b7283359d852c60b209d1a509e1ac4d4c6df4b18cab3c0
SHA512

405b7b0257f6d4f180a53bab888ce37ad2bcdc467de59faf479e490a701e0779331b415e65ae0ce66bfb74e388f33e94d1c399dd4653638139b261f5cb2b42d3
SSDEEP

12288:uTz+Xd6Wl+uAcY3S6/InHtdMYYFrbNJZcA5F:uf+wOFY3S6/InHIVbffF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00402ae76dcde2dc54fd1f8ba1691487_JaffaCakes118

Files

00402ae76dcde2dc54fd1f8ba1691487_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f433e7fcc51e68080022754836705744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree

user32

MessageBoxA

Sections

.text
Size: 152KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

i8aa453x
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

dcat89gz
Size: 213KB - Virtual size: 216KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

q10dzn38
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ