18f58ba6ff8bf3fc4f4c771744be4f3a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

18f58ba6ff8bf3fc4f4c771744be4f3a_JaffaCakes118
Size

34KB
MD5

18f58ba6ff8bf3fc4f4c771744be4f3a
SHA1

a83b6e02b9a7b26e750943fd275f80ee198bd600
SHA256

bd63e4f9485ceaa664320573f0d763e55ff518bd671bbf60c58379d28241dd49
SHA512

c8301172a250d6291c6291a1251725130f45a2e57e584b950d8b1097bc68a89ef0007686076214b6fda3c6e5160787830ce978661a5b2dc6dbac50cc485d66a2
SSDEEP

768:Skq2SkcG7bKVWqKZmtczZGtOLPh38M7qpB62G:SjdRG7mTtoskhsXpC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
18f58ba6ff8bf3fc4f4c771744be4f3a_JaffaCakes118

Files

18f58ba6ff8bf3fc4f4c771744be4f3a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

58708828d5c31968bd59859804ecde67

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
GetLastError
CreateMutexA
ExitProcess
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA

user32

MessageBoxA

Sections

.data
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ