1bb43904cec39a27ead9cb85077e0dbb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1bb43904cec39a27ead9cb85077e0dbb_JaffaCakes118
Size

64KB
MD5

1bb43904cec39a27ead9cb85077e0dbb
SHA1

6243a0bf7d8b2002d027574f4a4a2badd8aedc63
SHA256

13f1e84e590a9c4fea19a76dc13337f99dbdec93770b70231275b9fac5fc6b9c
SHA512

8e24a798fdb78ee84c9dce05b69402636038053996689e321e462673f37cf7a3f38d2db3e564c0d35fe9ce0710a69f361b4e1e514e15925521d0f90c98949cae
SSDEEP

1536:3QvHpB0ESlnviWa4Nt59GgMEmoEs5XKynmvP6ZYmL6mL7sCmh:MHD0ESFvO85G8Ei9nA6fvsCW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1bb43904cec39a27ead9cb85077e0dbb_JaffaCakes118

Files

1bb43904cec39a27ead9cb85077e0dbb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

536c35e361b8b671498d1baf00bbbda5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
ExitProcess
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
GetLastError
CreateMutexA

user32

MessageBoxA

Sections

.data
Size: - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE