174a0e0ad6d79e22d13f6dfaaba63215_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

174a0e0ad6d79e22d13f6dfaaba63215_JaffaCakes118
Size

336KB
MD5

174a0e0ad6d79e22d13f6dfaaba63215
SHA1

e9bd32594ed907ea193c629d89bbfe05bacd38c7
SHA256

97c7446c0d4882982e545dd8804a75726c0e812007301def29b987d274f59cfe
SHA512

e5a4774f8c2cd57931f593fe4e4fa228c4be3d78122087e78f9726a88b83c85fed4359103f3e662f489c9eca1042e04612ed47c5ea3b86f750169f95a5df0d0e
SSDEEP

6144:YSVI880cwX4ppNS4yrpvxIsdm2mEGEaJBvCLzRXTutEaIbxA:YAIwcYESTtJIEtaJBvezRD4IFA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
174a0e0ad6d79e22d13f6dfaaba63215_JaffaCakes118

Files

174a0e0ad6d79e22d13f6dfaaba63215_JaffaCakes118
.exe windows:4 windows x86 arch:x86

46b0675c1fd7681c7b19a1c83d5aff83

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
ExitProcess
LoadLibraryA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA

user32

wsprintfA
MessageBoxA

Sections

.data
Size: 325KB - Virtual size: 892KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.asprsc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ