2af3488ad54e7ffa0ac943204d17e71d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2af3488ad54e7ffa0ac943204d17e71d_JaffaCakes118
Size

275KB
MD5

2af3488ad54e7ffa0ac943204d17e71d
SHA1

cde4256aaf47081012f097e422d624952455694f
SHA256

253fb1941299a03023c92b601b4e6f53555f68e27a5218fd490a8c2a04b6a869
SHA512

1c717cd3364c0cbe46fcdf6d36fd15389a5fe2e1765df0fb5cb27fe50407ae0f270c6d8e08ba3573fc5282aaa4e6edeefc888839bce749b6a6ed0ae7ec898eed
SSDEEP

6144:0c3GwCgVcP4MoN4puuDwLhEw2bM4WueC2N5JFodrRt/4lKv:yGYI4suDNH4XdzNoBRVO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2af3488ad54e7ffa0ac943204d17e71d_JaffaCakes118

Files

2af3488ad54e7ffa0ac943204d17e71d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

acd9fa3a74cc4c1d92998e6ad62eeb8f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualFree
VirtualAlloc
ExitProcess
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
FreeLibrary
LoadLibraryA

user32

wsprintfA
MessageBoxA

Sections

.data
Size: - Virtual size: 708KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 236KB - Virtual size: 236KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ