2db752b91f59a8e8da10da606016abb8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2db752b91f59a8e8da10da606016abb8_JaffaCakes118
Size

182KB
MD5

2db752b91f59a8e8da10da606016abb8
SHA1

4f346c7eff3934c6d002516ce9f2a65b3d63c91d
SHA256

bf88f09ba3b01ba6c03c811c27b0cb822ab0975ea3813a695e3f5f09a7f6a68d
SHA512

1e362222a814b22652bb1ea0cc07a8fd1ec5a9e7c617abed243d4512c2e57ffe50db8a674e036ba874f019613b0a347e81afa0e249d099f59a6f6ffb8eedb604
SSDEEP

3072:bsMcCAfojxlgt91moCojgdUtmAtAjAYo4ZUIhocD8ik5R+wnd+LHyh94BIcX:bsMcGx2tGjopmAtKo4ZJhoq8bGUkHmk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2db752b91f59a8e8da10da606016abb8_JaffaCakes118

Files

2db752b91f59a8e8da10da606016abb8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f433e7fcc51e68080022754836705744

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

1w87g77o
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

a4cmh58n
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

43tmeu22
Size: - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

jo2jsm81
Size: 180KB - Virtual size: 184KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

j94nn7c.
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ