14e4aac4670f7836737bd95e38c67afd_JaffaCakes118 | Triage

Sharing

General

Target

14e4aac4670f7836737bd95e38c67afd_JaffaCakes118
Size

209KB
MD5

14e4aac4670f7836737bd95e38c67afd
SHA1

021f273ae791a368c71f4477d7cdaa5359747ad2
SHA256

9258c6bb1e097105842c128c416a440b009877c19152b42467640ebe07ecfa5b
SHA512

f03acc450b054a11109572e5d7534bf812318c286d47f38a43d1e477433d9c13d67401bfdbbab0815cd8d4b02bf32d1ad28c802d66fc679391240480adc7e69f
SSDEEP

3072:xN/gBZ6WUk+YFjXokYWbyqA6vKvV5ITXf2Z47plcQBcVil+zHemjAeGBfcR:xN/4UUvPQOPQkcQBcUrXER

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14e4aac4670f7836737bd95e38c67afd_JaffaCakes118

Files

14e4aac4670f7836737bd95e38c67afd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f433e7fcc51e68080022754836705744

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

4m1btfyf
Size: - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

5pcjg980
Size: 163KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

snt5q.j9
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ