23a71c36c1f5d3c2e1000c3d37ca3594_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

23a71c36c1f5d3c2e1000c3d37ca3594_JaffaCakes118
Size

33KB
MD5

23a71c36c1f5d3c2e1000c3d37ca3594
SHA1

8889f764d568004229c948a97ee326795da3bd0c
SHA256

a92d6d415f9b1a65f30014a4a40be827eaeb186e12c9ac633df0ed493619407d
SHA512

d50ac48018959aa2b717cd263b19ded8e842f794933d0f5e6152015ec2ef3abccd4d1bc76d7970328202a0520321b61602e563b58f10bf9089d7503912c3125e
SSDEEP

768:yUr6BDCW5zuBD18elnAl1v1Vad8EXWzTlfMU8x:n6NjA8YAl1/aGEXWzpix

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
23a71c36c1f5d3c2e1000c3d37ca3594_JaffaCakes118

Files

23a71c36c1f5d3c2e1000c3d37ca3594_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bd227ba966c127e93fe82f25f211eaca

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
ExitProcess
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
HeapAlloc
GetProcessHeap
HeapFree

user32

wsprintfA
MessageBoxA

Sections

.data
Size: 22KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_rsc
Size: 3KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ