160a2e019d901d469465da96b2f528e9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

160a2e019d901d469465da96b2f528e9_JaffaCakes118
Size

879KB
MD5

160a2e019d901d469465da96b2f528e9
SHA1

5b192da3b3238e64ee32c788064362cffbc5d03a
SHA256

7a80a30c3392bc6076939d901cbb7bd1c3ce657778449e01640209ef5ef95797
SHA512

1025ed6b3a68739da9f964e9e4148c4265fcc222b1a9ee93e6067943949da65e837002b3d909b1eb1a09a5fe853a094e2891949022abdb8ef2cb40927e32e7d9
SSDEEP

12288:zRMcEQI3gZj55m9Zs8Ki+I2VotzVK2pfwx1fJLBRqESgQmh:WNQ94tzVKuYDfJlDsmh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
160a2e019d901d469465da96b2f528e9_JaffaCakes118

Files

160a2e019d901d469465da96b2f528e9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c0ca8fb524d53a294a75f3adfde9e816

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
ExitProcess
GetModuleFileNameA

user32

MessageBoxA

Sections

.data
Size: - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 417KB - Virtual size: 417KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_rsc
Size: 456KB - Virtual size: 456KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

zzm24
Size: 1000B - Virtual size: 1000B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE