04a6ed5d01d497010e804176f7fc111b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

04a6ed5d01d497010e804176f7fc111b_JaffaCakes118
Size

282KB
MD5

04a6ed5d01d497010e804176f7fc111b
SHA1

0bc7ccbef3d4494a83bfc980c1a74c439e1c944f
SHA256

f28eac6fe2791417ff0eeb70f67ee37c3e3677b56c23fef524dcae1731803a71
SHA512

e3e5ddc9ef8ed49ac8dfa2652def29915ad6d1d9ad3c78a1aa5731ef37a24e868457a4739d30cf5d719a56526ec863a65ce72458d754404cfe0a0adfe20f7ff4
SSDEEP

6144:AMIo3vCpKB1yxKW+nXFUd6BdAMIz/CpFpsNfDpfwIro:APo/CpKlnI6B+KpFmNfyIro

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04a6ed5d01d497010e804176f7fc111b_JaffaCakes118

Files

04a6ed5d01d497010e804176f7fc111b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

99f5b0b723d6fca2813f516623081e1c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualFree
VirtualAlloc
ExitProcess
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
FreeLibrary
GetLastError
CreateMutexA
LoadLibraryA

user32

wsprintfA
MessageBoxA

Sections

.data
Size: - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 266KB - Virtual size: 266KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ