0fd17418a4e2a4850803b8ccd1af3118_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0fd17418a4e2a4850803b8ccd1af3118_JaffaCakes118
Size

519KB
MD5

0fd17418a4e2a4850803b8ccd1af3118
SHA1

76c229ab92b0fb1b0d612edef6cff9581dbe28a9
SHA256

cfbe727fa69336493ec7e7d309ea2168d231494bf4fedbdf460405451b2e17e9
SHA512

9726e1c9575eed38551d27899566c819bccebb186a144dce24ec71fc85ffd617172cef000e1643a7487d42dffc46bee573a94b7baf1ad51be32d14b58e58e814
SSDEEP

12288:G2wEQ1m9gmD1ntSZWHggSwZxxYSzhe2gguMJZi2vXspwu:dHlD1tSIAgDb6SVeNgNU2vXs/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0fd17418a4e2a4850803b8ccd1af3118_JaffaCakes118

Files

0fd17418a4e2a4850803b8ccd1af3118_JaffaCakes118
.exe windows:4 windows x86 arch:x86

acd9fa3a74cc4c1d92998e6ad62eeb8f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualFree
VirtualAlloc
ExitProcess
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
FreeLibrary
LoadLibraryA

user32

wsprintfA
MessageBoxA

Sections

.data
Size: - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 478KB - Virtual size: 478KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ