28433891de6fc6fc38457f4eae53d98b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

28433891de6fc6fc38457f4eae53d98b_JaffaCakes118
Size

434KB
MD5

28433891de6fc6fc38457f4eae53d98b
SHA1

b6c770cb7eaf6aae80cfde0f75aeae998b911de1
SHA256

b5638f224708a5ba785ce6ae0211c8a9b232097db7d70ebc5855b42e2a459c12
SHA512

6b6e210271f11e30c54c2e50f8e8c9d3f7986de2b485fbeed87d15a1745bd24fd508326e1c022b5eb7c71d6f2dd34024df508c25d63cc0ecf2ee228c7ed7079f
SSDEEP

12288:uLL+8d6WlKuAcY3cTlp9C20wZH2oeFikpKriN:uH+lOJY3c5coc9Ie

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
28433891de6fc6fc38457f4eae53d98b_JaffaCakes118

Files

28433891de6fc6fc38457f4eae53d98b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f433e7fcc51e68080022754836705744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree

user32

MessageBoxA

Sections

.text
Size: 152KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

yrl8x1ry
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

tbc3sjfp
Size: 209KB - Virtual size: 212KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

nmu9r4lu
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ