02ede368dda4080c9377ab40e5a2abbd_JaffaCakes118 | Triage

Sharing

General

Target

02ede368dda4080c9377ab40e5a2abbd_JaffaCakes118
Size

870KB
MD5

02ede368dda4080c9377ab40e5a2abbd
SHA1

825852561271fd65013480872bb70cf16d9bf2ef
SHA256

9f62bc9d7c2a01e26fbae95081a35585006cfe46576e57171356fbd953eae34d
SHA512

d6c225129075c0f240326ef75b753af2d5f511f224663f687c82d24a4498ba16e0e558263b37e6cb65c2d36f93af528d8ef5949860e225c6fb91e3e25270a187
SSDEEP

24576:JAOOvC1D0N+siYNGCv452jhsOqf0CHv9U55EehQF6k:+TSI5iYIp0VPqsCP9U553QF6k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02ede368dda4080c9377ab40e5a2abbd_JaffaCakes118

Files

02ede368dda4080c9377ab40e5a2abbd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

536c35e361b8b671498d1baf00bbbda5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
ExitProcess
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
GetLastError
CreateMutexA

user32

MessageBoxA

Sections

.data
Size: - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ