3264c91f5fa8cc2df69f742968aadcc8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3264c91f5fa8cc2df69f742968aadcc8_JaffaCakes118
Size

14KB
MD5

3264c91f5fa8cc2df69f742968aadcc8
SHA1

762949309b61e038a425ab6e1d890fa4eb0fa526
SHA256

0b56cba21cf9c79ee5cc278a428d146becd8436e8d27945cb45c6172499a65fb
SHA512

89c9f2733befcac7c9941dc0e1f5bb3c39e2fdb352549afb668d683f8714a9ae69f8b3e4c3720a27e61550a5ec2f003b7a23add69d870e8c12bd0c002c5cc470
SSDEEP

384:qrpqoeB4pnqDFtzCRJ9JFedZ8krSafr4XKJ49oFwl+mSyu:qGoJXNg8keasYcLl+mxu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3264c91f5fa8cc2df69f742968aadcc8_JaffaCakes118

Files

3264c91f5fa8cc2df69f742968aadcc8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c0ca8fb524d53a294a75f3adfde9e816

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
ExitProcess
GetModuleFileNameA

user32

MessageBoxA

Sections

.data
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_rsc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ