075843a3bcbc6da4d67e831d21e18d24_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

075843a3bcbc6da4d67e831d21e18d24_JaffaCakes118
Size

229KB
MD5

075843a3bcbc6da4d67e831d21e18d24
SHA1

6bb38f82d07023abcd454d593ab1c967a4552143
SHA256

0d5d01dce4f78602c747012091742fd5f93741d692746f6ae40619803496ab6e
SHA512

991f1c7f990ff5c20b01c2885df3468b1fc743fdb5a89bb56b0f20f108fdf5817cce7f1d4351ecd2b9577be5b9d67d9b12f331c814ed2e863837f679c3925a16
SSDEEP

6144:b6M5wqqCN1Whs7yG15TohAF/XKpitkgelrP:bp5wqqm1Wq7yGzTKUzkrP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
075843a3bcbc6da4d67e831d21e18d24_JaffaCakes118

Files

075843a3bcbc6da4d67e831d21e18d24_JaffaCakes118
.exe windows:4 windows x86 arch:x86

acd9fa3a74cc4c1d92998e6ad62eeb8f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualFree
VirtualAlloc
ExitProcess
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
FreeLibrary
LoadLibraryA

user32

wsprintfA
MessageBoxA

Sections

.data
Size: - Virtual size: 568KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 194KB - Virtual size: 194KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ