367780e0d7b7926cd41917a1f0146d0b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

367780e0d7b7926cd41917a1f0146d0b_JaffaCakes118
Size

71KB
MD5

367780e0d7b7926cd41917a1f0146d0b
SHA1

93f79d2d124b40348e6c0dbdffc9e72f55c00754
SHA256

c9ba753e02931d4a39704041f46e2a3d04ad194714b4227fc52866213b285662
SHA512

f04e1ac13b52480386a6ff29813f1d43059c6633194d55a963bdbeb3c49050ed53694c09dded951447964407ae194d8d49ecef7b51f25ae42925bc9f3e4c5a0a
SSDEEP

1536:8xh72ADITwzNOVspiW8xJfYSfMIMr1wiDMQYVi3nqlqrOuG:8xh7gTwzNWrxJfl8sRi3n+WOuG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
367780e0d7b7926cd41917a1f0146d0b_JaffaCakes118

Files

367780e0d7b7926cd41917a1f0146d0b_JaffaCakes118
.exe windows:1 windows x86 arch:x86

431a3fff111540abb4207f66d4ba17e4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
VirtualFree
GetProcAddress
EnumSystemCodePagesA
GetModuleHandleA
ExitProcess

user32

MessageBoxA

Sections

.code
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 278B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ