0e3ae4564e01fc9e46a5a809e984d484_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0e3ae4564e01fc9e46a5a809e984d484_JaffaCakes118
Size

30KB
MD5

0e3ae4564e01fc9e46a5a809e984d484
SHA1

29d11e5fdf98a65de5ba05b318c0560149c7e2f4
SHA256

9fd3894dd1800894e37213b6d1baab20021c2e718861f0b849b0339992fd6199
SHA512

1fd922f168d21a27625d40f03061ccde8c95bcc58e6331047ec1c8eb611cab2bcefdfd344d20fcb8465a849b3555038104f3f65bfe854105646e48b2ee3d534f
SSDEEP

768:2Mq5C9tSb9kG6XVd+gMBa/GEL3tZEX/K0X0icpgRgMD:2Mq5C9YaugMBauEEzXTgMD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e3ae4564e01fc9e46a5a809e984d484_JaffaCakes118

Files

0e3ae4564e01fc9e46a5a809e984d484_JaffaCakes118
.exe windows:4 windows x86 arch:x86

15a40fc888a24c3586ca9563306e006f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
ExitProcess
GetModuleFileNameA
LoadLibraryA

user32

wsprintfA
MessageBoxA

Sections

.data
Size: - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE