15450998d5fedfd963e01d5c7dc15319_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

15450998d5fedfd963e01d5c7dc15319_JaffaCakes118
Size

131KB
MD5

15450998d5fedfd963e01d5c7dc15319
SHA1

fd5652198b7a8897b8e33a9c5549f36bf5c2cf95
SHA256

655a022914512e09e46e45e98b52117013910ba8fb1945a21f05256c6888c502
SHA512

8cc4ecbb32322c28959d76efcda382cb1ac9a58ffa71b8bf30568ac5c7f32961c963eab4e8d49e22977c072323595b0d514925f48427c43e926e5a9c07c650a3
SSDEEP

3072:IbXRcWYnMUgi0mHvHq79VLU+9gZvSW1hSmethOaLXXG+AiDsFVqlt6EAh:GBcW1DLJ901hSmuO8XXGZefZAh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15450998d5fedfd963e01d5c7dc15319_JaffaCakes118

Files

15450998d5fedfd963e01d5c7dc15319_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f433e7fcc51e68080022754836705744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

euikpbin
Size: - Virtual size: 264KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

jb18.5h2
Size: 312KB - Virtual size: 316KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

mzo.y1gb
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ