07a667cf0393f86fe7360a74d222a2ca_JaffaCakes118 | Triage

Sharing

General

Target

07a667cf0393f86fe7360a74d222a2ca_JaffaCakes118
Size

442KB
MD5

07a667cf0393f86fe7360a74d222a2ca
SHA1

95d398d3922310441240c6932970fffcab7cb88f
SHA256

cba406f0e66cb0713ff5a97efecc79c5fc89fa33acb1dee87c5c6698147363a6
SHA512

a63775c961a9440a1e7b1fb247085f854963e2733720bf1e2fada7cca7a40164d94b702b265cc42ddb4c49c9b9bfcd1b45f8b8432ec6be8f86c0e76873cd8275
SSDEEP

12288:NH4vZD5r5gDJg+TVLqyCeFNgZsNVYFmbuw:iZfybLR5gZsNCw3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07a667cf0393f86fe7360a74d222a2ca_JaffaCakes118

Files

07a667cf0393f86fe7360a74d222a2ca_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f433e7fcc51e68080022754836705744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree

user32

MessageBoxA

Sections

.text
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

gzx4gsc1
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

tovrsjbj
Size: 264KB - Virtual size: 268KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

hlxb8obs
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ