0e9addac600c18fcd25ecf4f1a467d71_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0e9addac600c18fcd25ecf4f1a467d71_JaffaCakes118
Size

693KB
MD5

0e9addac600c18fcd25ecf4f1a467d71
SHA1

9967aad7ab02eb238672f23bde7ff3d27f1a2105
SHA256

ae81a8e5c023f04bde45627959aa0a7a24ac66cd8ce51361b2caec304077b45a
SHA512

e0ee430f1776512acbdea564a68e002c892667e78b6a22b18a5ce0406948cb236583011ad90e5a3dfd4ba362cdaceab8b0b1e355a6d2456dba35dc483863ccc1
SSDEEP

12288:0XjR6Td35+P9o1pui5ZCXigXU/+CDIMPJzVMIDpspt8dTsvvqYHK:oNsd38PyZIigXL3MxRMIqAIJq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e9addac600c18fcd25ecf4f1a467d71_JaffaCakes118

Files

0e9addac600c18fcd25ecf4f1a467d71_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f433e7fcc51e68080022754836705744

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree

user32

MessageBoxA

Sections

qby1rroj
Size: - Virtual size: 796KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

77zffhbb
Size: - Virtual size: 520KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

8.6ux.pt
Size: 684KB - Virtual size: 688KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

12q3r.2v
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ