24d825dfbb9fdd1cefcb8053c977cce5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

24d825dfbb9fdd1cefcb8053c977cce5_JaffaCakes118
Size

38KB
MD5

24d825dfbb9fdd1cefcb8053c977cce5
SHA1

bf8593e4f1144a5577e1bd979c02410443c30a2b
SHA256

5c6ffcf8ce18fee856209032d8fa8b2e34e8d9dd6f788fe037452a87a759c747
SHA512

813e8a36126ef37cb1cc91bfec8d7bdb4137770799d6a38eaa3d1c2a08e19d53b4616a93539d64e0e0209c63466cb08416ae3fa68734d400279cfd38712d93a8
SSDEEP

768:RVmfs2840UDORsS08PvougmFPlwytoQBFtpjhDW9kKPSM:RVmf1iSORs0vTb9SytoQ/DhDWazM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24d825dfbb9fdd1cefcb8053c977cce5_JaffaCakes118

Files

24d825dfbb9fdd1cefcb8053c977cce5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e1ad2f986ad7f776fd3caffde19f0d01

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
FreeLibrary
GetProcAddress
LoadLibraryA
GetLastError
HeapReAlloc
HeapFree
ExitProcess
FindNextFileA
FindFirstFileA
FindClose
GetProcessHeap
VirtualFree
VirtualAlloc
GetModuleHandleA
GetCommandLineA

user32

wsprintfA
MessageBoxA

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 522B - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 562B - Virtual size: 729B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

u04Mg
Size: 20KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

7LCXk
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ