1966eac62e9d1ecace307b13875250ff_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1966eac62e9d1ecace307b13875250ff_JaffaCakes118
Size

1.4MB
MD5

1966eac62e9d1ecace307b13875250ff
SHA1

11719b1b44aad0cc32a76a3fd7ec081d9b25d1ae
SHA256

2ed62b4515baea57c0a037dd1f712988902dce0eb0114f5c0d11f9e1c4ee95db
SHA512

aea4a64eb3c85fa6a5da7841d447d3f6092320ba406c4e6162b0037f18df681b17e94505b1e80fa06e405c9f7a39eba3c8422773cf80d3d9cde58382f7697a77
SSDEEP

24576:Cls8EjBzOS6rZXbZqD0ggnXowCBahzUNkI3+LnP+OqWigRFqhO2ntqqD8IEm:xTlRcxZ80gTwCWyl+LP+Oq7gv2tqcEm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1966eac62e9d1ecace307b13875250ff_JaffaCakes118

Files

1966eac62e9d1ecace307b13875250ff_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c0ca8fb524d53a294a75f3adfde9e816

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
ExitProcess
GetModuleFileNameA

user32

MessageBoxA

Sections

.data
Size: - Virtual size: 5.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_rsc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ