24927f6789e81ba1a102264e52bfddab_JaffaCakes118 | Triage

Sharing

General

Target

24927f6789e81ba1a102264e52bfddab_JaffaCakes118
Size

788KB
MD5

24927f6789e81ba1a102264e52bfddab
SHA1

ed10c32b1db5f63ec313ec3961286042d40a0811
SHA256

9c89ea941b8225ccd104d8cad679c204c607914ec141fe73c5b5225d678d6741
SHA512

7eed472a0c7edadbaf1b734761b658585d83864b4ff62d41a5ad716b4ee65cad46be310ed3c278bb65db8585f49fed528efc3dc772e661d3433a819d29bc1333
SSDEEP

12288:xJ9XR9R3QD23LItbbkg20rMdE6V5Wl3VX5twlFPuMXwLmuFZhSnpod0MuYqwBB:pXRL3QDOct1lrKE6V5UVX5tWYMzn3AB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24927f6789e81ba1a102264e52bfddab_JaffaCakes118

Files

24927f6789e81ba1a102264e52bfddab_JaffaCakes118
.exe windows:0 windows x86 arch:x86

4bda570ce112adc211f3bd7fa6b82f33

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetModuleHandleA
GetProcAddress
VirtualProtect

msvcrt

malloc

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.QW0
Size: - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.QW1
Size: - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.QW2
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

xiaohui
Size: 6B - Virtual size: 6B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ