2e96d0bbf09f6fa859c222f3988fd125_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2e96d0bbf09f6fa859c222f3988fd125_JaffaCakes118
Size

439KB
MD5

2e96d0bbf09f6fa859c222f3988fd125
SHA1

701f18988c69ad9b35bbfe9b4058e9a44626ee86
SHA256

82566080f5f9a3954573cea372171c2e1f09cbbfb18ae7f0b0f423dcc097cca8
SHA512

55739c1bb20b1d6e02997b4850acee25368d58fee0006291684313701431fbfe6ca6495b4b4dd2e7b4c455d838e3c431220ce509b083cf4fc5edc98f79fbc67f
SSDEEP

12288:um9h+6d6WlUuAcY3Clv7RKBKkvJ+loCLlDT:uc+LO7Y3CxQqKCpT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e96d0bbf09f6fa859c222f3988fd125_JaffaCakes118

Files

2e96d0bbf09f6fa859c222f3988fd125_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f433e7fcc51e68080022754836705744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree

user32

MessageBoxA

Sections

.text
Size: 152KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ts8brgq7
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

ig3xagfl
Size: 213KB - Virtual size: 216KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

x5042t1n
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ