01ac986b863a4454a6e1348e587c2ba3_JaffaCakes118 | Triage

Sharing

General

Target

01ac986b863a4454a6e1348e587c2ba3_JaffaCakes118
Size

60KB
MD5

01ac986b863a4454a6e1348e587c2ba3
SHA1

2c2ae9f74b4cc46ae1dd4d1d25cc161806333816
SHA256

f26b85cb5c0762aaf4e10c51fe86ddce99bec0dd9e32449b21b6d2ec228fb4ad
SHA512

b797358c95f87d95aa2e1b220daeae585ca406b2ade8e79aa4cc2644a2d0cb66a7ba0dac465c2095b48a5b8ab4f1a06706cd8eef6ac87348d08e81236706b449
SSDEEP

1536:+aw9mqz6CVeP0skmdshMOYztn7Ka86NruoyPiZoKf:K9mq+CUzkmd3O8n7XNXZoq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01ac986b863a4454a6e1348e587c2ba3_JaffaCakes118

Files

01ac986b863a4454a6e1348e587c2ba3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c0ca8fb524d53a294a75f3adfde9e816

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
ExitProcess
GetModuleFileNameA

user32

MessageBoxA

Sections

.data
Size: - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_rsc
Size: 240B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ