1c4dae5583b5d0e4cc1b24a93570dd8f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1c4dae5583b5d0e4cc1b24a93570dd8f_JaffaCakes118
Size

192KB
MD5

1c4dae5583b5d0e4cc1b24a93570dd8f
SHA1

9227fa152235c6a133f4696e2b0a83387b27e63c
SHA256

01da456081d76eb53fac9f471144b7d1b5e92bdf077903fa42658ead7d247707
SHA512

da0d75a472c46a737bbf94a00a28a4afd05ce3607b3c98bdf65649b8368affbab3a909267eec057bb098ca2cdfb34fd6d24b1867e053349214fc3bcc4c6d0273
SSDEEP

6144:DpFRRy+qmFH4S7RXnRLKV/US4eY08aTeTl/K2p:DXRRyNmN3ROweY08uQrp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c4dae5583b5d0e4cc1b24a93570dd8f_JaffaCakes118

Files

1c4dae5583b5d0e4cc1b24a93570dd8f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

536c35e361b8b671498d1baf00bbbda5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
ExitProcess
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
GetLastError
CreateMutexA

user32

MessageBoxA

Sections

.data
Size: - Virtual size: 232KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 178KB - Virtual size: 178KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ex_cod
.pdata
.rsrc/0/version.txt
.rsrc/1033/GROUP_ICON/103
.rsrc/1033/ICON/3.ico
.rsrc/1033/MANIFEST/1
.xml
[0]
[1]