2a0f0b087ee5334f5fe3a94be5be5036_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2a0f0b087ee5334f5fe3a94be5be5036_JaffaCakes118
Size

115KB
MD5

2a0f0b087ee5334f5fe3a94be5be5036
SHA1

ae96b94513c34b4bc74100e4fe55c72cf7105610
SHA256

674403d1c1f5dbc19cd9d359c553d241e85a487c21c2c3cb7c4661b727e2e780
SHA512

c58f410396e080f4ab015474fd3c8e2f81a44bcfd11de3ab13000edf9852a6ab6d0fd17dd03454cff744e1289697e84144854ffed9ef3eed4e6523428719b1af
SSDEEP

3072:hGY+CdVwgQOW2Rt5qhzkgyo5K21/8dmpA:hGY+WVwgQNk5qhzXyo5lUdj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a0f0b087ee5334f5fe3a94be5be5036_JaffaCakes118

Files

2a0f0b087ee5334f5fe3a94be5be5036_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f433e7fcc51e68080022754836705744

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 412KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

wkmkam7u
Size: - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

tc.sd56v
Size: 113KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

d37awqgm
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ