185453d4d4a718b9193d647cda1bfba1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

185453d4d4a718b9193d647cda1bfba1_JaffaCakes118
Size

350KB
MD5

185453d4d4a718b9193d647cda1bfba1
SHA1

2a3566457ca7f907d878ea83be4994b1d18e7f4f
SHA256

f728ddb3c44f723b32341ebb52eaeded826a67fb2cec428c4fd0c75c69ed25e5
SHA512

e002e43dd69789f2ebb7984772ec00718bb6c10c996c97c922dba491daef1b047835674ba46bb1e2411fdd3c7a926833efbb73aea8408ef006bd39ab482b9eaf
SSDEEP

6144:sOzO2b/w3/AllmoRAl0dJtDJ8H5iVC6EHDrTCqE4hvMYimEN0kYzxIfZUV3t8YHS:sz2jwoyLlMzDJY9fyAMcEN7MiZYf6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
185453d4d4a718b9193d647cda1bfba1_JaffaCakes118

Files

185453d4d4a718b9193d647cda1bfba1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bd227ba966c127e93fe82f25f211eaca

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
ExitProcess
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
HeapAlloc
GetProcessHeap
HeapFree

user32

wsprintfA
MessageBoxA

Sections

.data
Size: 312KB - Virtual size: 880KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_rsc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ