38ce052de2ec54ef15eeb4f32d9887be_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

38ce052de2ec54ef15eeb4f32d9887be_JaffaCakes118
Size

69KB
MD5

38ce052de2ec54ef15eeb4f32d9887be
SHA1

00600e12ceffbdf8c010439c1f97d302227ddf41
SHA256

25bbf8b3d506b10d00ad889e6cad48ffc025b99d839f15984215fb06dbfd23c4
SHA512

2a6d7c73d8bc779cb92898922d7413243cf2a55a5394c090367df13f4b9659b53b5f96fe18576c82cde4bebac492c9e6df17d0a509e13db5a64ad9641b533d09
SSDEEP

1536:DfnzvSX1DwY25X4H1B7mtCoSxPP48Tyn7C9bB4ESEWXRnM4pM3lCOAI:rzbY25XTtqJQ8Ty7gBPSZMAMUOAI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38ce052de2ec54ef15eeb4f32d9887be_JaffaCakes118

Files

38ce052de2ec54ef15eeb4f32d9887be_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6e1f282449492d5fc7a87e6f1c3ced5d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LocalAlloc
LocalFree
GetProcAddress
ExitProcess
LoadLibraryExA
GetModuleHandleA
VirtualFree
VirtualProtect
GetModuleFileNameA
VirtualAlloc

user32

wsprintfA
MessageBoxA

Sections

.data
Size: 13KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 5KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_rsc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ