2b559cf81796e37bbc46c7466b74ee15_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b559cf81796e37bbc46c7466b74ee15_JaffaCakes118
Size

293KB
MD5

2b559cf81796e37bbc46c7466b74ee15
SHA1

aae7910beca6c1edd7f8c99ae11d506dd7a77d16
SHA256

875332297fc3b4d645f9b312425a88585f0709cb8fe62703af20b53531afa962
SHA512

84a15004cd4475a9acdaf56d625d51bae3690f55f420d23c79e21992ee59633dc066e97f2d2f420338234a65b3f73268cb3cf1f63b8194ffea100e2b7d9d5a8d
SSDEEP

6144:aHpdP57nbs6tLA+LHHRicvJcrBYhPkkxPRUgIbWlf7ppGe0c7BHw99:QfltvLRdyrihFxPAbWB7pBH0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b559cf81796e37bbc46c7466b74ee15_JaffaCakes118

Files

2b559cf81796e37bbc46c7466b74ee15_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f433e7fcc51e68080022754836705744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

g42ox0dm
Size: - Virtual size: 248KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

3ofqi9n2
Size: 283KB - Virtual size: 284KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

as4ie9zl
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ