1aea957dab0b8d541bf3f08d56b0c2b5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1aea957dab0b8d541bf3f08d56b0c2b5_JaffaCakes118
Size

85KB
MD5

1aea957dab0b8d541bf3f08d56b0c2b5
SHA1

a553a7b2da68b052f1ca5b1645056ee5311bc015
SHA256

6224a14164c9dacaa61a8472c69ae175df22ec2a1afd20d1fab2d66780510ff3
SHA512

caafdbd51d3dec5c962e6e3d51904f063398bfdaebe41c9a5b252e1c8835e9f5df3dbb1beffd2304dd351dbe47c7e18c39b6ae7ca91f5119b740569955ddc694
SSDEEP

768:SLT99wGrF0icp1So+XAe2OtBXxjSN1+/27/vJRruc64:C99wGrF8So+P2OtxxjR2LvJ56

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1aea957dab0b8d541bf3f08d56b0c2b5_JaffaCakes118

Files

1aea957dab0b8d541bf3f08d56b0c2b5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

15a40fc888a24c3586ca9563306e006f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
ExitProcess
GetModuleFileNameA
LoadLibraryA

user32

wsprintfA
MessageBoxA

Sections

.data
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 76KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE