275b3eed6c7066a42ccda8dde2cbbf9b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

275b3eed6c7066a42ccda8dde2cbbf9b_JaffaCakes118
Size

374KB
MD5

275b3eed6c7066a42ccda8dde2cbbf9b
SHA1

aef2bf45a4a07c40a938255251a838b0c4e3c56d
SHA256

785915eab7003e03d5096d136c0f855d295cc650182f3328a0fe1f347046a984
SHA512

f983da3b721380a25c7a5c18a19c2f18fdd6609ca941924d2e9abb3dcc5dd8a2721ad7f43ec6c38147111ab6a435524d9da3f1477b0e6516206a65cdc5eda05b
SSDEEP

6144:enAE1Si43Xp21Ten+NXRvMbqlF1XI/2axsj9XxSq16tyTLTOGLzxY9MvdvJnAJOo:DSSTp21qnoXRkbqlFdOPshXMMTLTRx9Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
275b3eed6c7066a42ccda8dde2cbbf9b_JaffaCakes118

Files

275b3eed6c7066a42ccda8dde2cbbf9b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bd227ba966c127e93fe82f25f211eaca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
ExitProcess
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
HeapAlloc
GetProcessHeap
HeapFree

user32

wsprintfA
MessageBoxA

Sections

.data
Size: 307KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_rsc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ