314c58e156c455e5887b82bef460ebb4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

314c58e156c455e5887b82bef460ebb4_JaffaCakes118
Size

346KB
MD5

314c58e156c455e5887b82bef460ebb4
SHA1

44fadd0f546f2fe4df8c95f2f13db10f06caf190
SHA256

61dbb36143fd96f11b305c83ae20d7134e3b540cfb044d7969fd17864a6ca972
SHA512

fe284f84f8f76826e8c294dbd95a93ec741b2fd31e07f1db8a5ccede83da6fb5f8f8eca5cc6247f5259566dc84c469e6766cdcc5fc813b9aa53653d38d7e77ed
SSDEEP

6144:SIS8uYJwXD6aMAWSe4NOfYjkWFLzNIMQ6p0tyPfs/bqwpCeu6Qxe31KXhOK3:RS8uc0ualjJpLKyk/mwgV6QxeIL3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
314c58e156c455e5887b82bef460ebb4_JaffaCakes118

Files

314c58e156c455e5887b82bef460ebb4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6e1f282449492d5fc7a87e6f1c3ced5d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LocalAlloc
LocalFree
GetProcAddress
ExitProcess
LoadLibraryExA
GetModuleHandleA
VirtualFree
VirtualProtect
GetModuleFileNameA
VirtualAlloc

user32

wsprintfA
MessageBoxA

Sections

.data
Size: 326KB - Virtual size: 788KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 5KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_rsc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ