32d28996cf22d63d242ffb2e1430a3b3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

32d28996cf22d63d242ffb2e1430a3b3_JaffaCakes118
Size

2.3MB
MD5

32d28996cf22d63d242ffb2e1430a3b3
SHA1

492bc98c0a64d5ced6a697772de328e10c6f9324
SHA256

a5094600d2f9c517b188fb80a0adb9b55e8dfaaa59034635f504870e7f0ee34a
SHA512

64d0bf4538cade879fe5dbf43258508050e376973883013b28693c1eea95c22cdf7bdd809b8f905f9e98f43d07f7fc0a3eb85f6bae7028023c3b32f8f6011033
SSDEEP

24576:GTrX1/4a06+FaAOAdKhZKlE8EmgADKDQ8CT3EEhwPMiwUj/mhyMDvPgcqr+uC6UI:GPYWAihMvxhwqUj/0D/gYHVE2RwUU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
32d28996cf22d63d242ffb2e1430a3b3_JaffaCakes118

Files

32d28996cf22d63d242ffb2e1430a3b3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f433e7fcc51e68080022754836705744

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 344KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

wwfw62gc
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 7.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

331o4c3o
Size: - Virtual size: 400KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

63he8wxh
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

axoka91o
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ