03bf1a0c42fc00ff313b4fdbb1407fe6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

03bf1a0c42fc00ff313b4fdbb1407fe6_JaffaCakes118
Size

334KB
MD5

03bf1a0c42fc00ff313b4fdbb1407fe6
SHA1

b9d5ce6d981633c7142964b173d3df85f86ae72e
SHA256

d89ff19fe9be46e45c95c4bc659e6f8c1eb679d6a4ffe2f4e558e6e04f8ddb6b
SHA512

ab82136fb737849094a39760a20480443971b1aa7b5ef64f430bf25353f37e3c09706f7c556ea20aca0a821aac4932f8fac54f2ee1c22e05ce89cf2359fa1eda
SSDEEP

6144:SSMg6T3cJqrVV+GhbN/O2Md8COSuh3bG2PvNhgunBY:kgMXJlZ/OX7EFNhPB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
03bf1a0c42fc00ff313b4fdbb1407fe6_JaffaCakes118

Files

03bf1a0c42fc00ff313b4fdbb1407fe6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bd227ba966c127e93fe82f25f211eaca

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
ExitProcess
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
HeapAlloc
GetProcessHeap
HeapFree

user32

wsprintfA
MessageBoxA

Sections

.data
Size: 293KB - Virtual size: 796KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_rsc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

ddd
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE