1737475cdf47d2a8cbacc2838a831c94_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1737475cdf47d2a8cbacc2838a831c94_JaffaCakes118
Size

40KB
MD5

1737475cdf47d2a8cbacc2838a831c94
SHA1

ef1a954a61ec6a5921c86a01a72fa4a38d09959f
SHA256

dcd0a67026500ee63817b6cd9b8789b7a4d8c6c5a3bc8270c98194cb8799e432
SHA512

63bd2738249221555fc6e59e3a7853029bdf7c5a7a7f52d99bb4af029ce16ee15c989de257e11338bf94cc869d6a69df2561454e5aa0b7cd5b8b8fe5ae632568
SSDEEP

768:R6VGfhdbEtVI3L8C5xzk9d6NiXxybUqc3os+2YxOhicCeDz:8VGfhdbEtVI782zk9IDUqKYxOrDz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1737475cdf47d2a8cbacc2838a831c94_JaffaCakes118

Files

1737475cdf47d2a8cbacc2838a831c94_JaffaCakes118
.exe windows:4 windows x86 arch:x86

15a40fc888a24c3586ca9563306e006f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
ExitProcess
GetModuleFileNameA
LoadLibraryA

user32

wsprintfA
MessageBoxA

Sections

.data
Size: - Virtual size: 444KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE