238d2099090cb47e3c2645ec9266c00f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

238d2099090cb47e3c2645ec9266c00f_JaffaCakes118
Size

62KB
MD5

238d2099090cb47e3c2645ec9266c00f
SHA1

3832bd99f26f5912af4ab60d4c96f2f04fcb1d1d
SHA256

1d3700d05d7e9d1319dfaadc1927ef5168116b7e9b5a1d4773bb055e4b4e8f56
SHA512

9297726890f17828258c7bccfe1289e7120c6fd51a33bb30bc32e1bb4c23ab3b502105cc44b2b0b30ffe5045faccd69cc4eac10b5567192d4fe71f62b5b8279d
SSDEEP

1536:PuqrLLrnEdsyM2zXaNFhELMdDDJ5u2Bu6D39M:PDnEdsfmXa/hyCDJU2kI9M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
238d2099090cb47e3c2645ec9266c00f_JaffaCakes118

Files

238d2099090cb47e3c2645ec9266c00f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bd227ba966c127e93fe82f25f211eaca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
ExitProcess
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
HeapAlloc
GetProcessHeap
HeapFree

user32

wsprintfA
MessageBoxA

Sections

.data
Size: 9KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE