3947c74dbe74b58bc7359a1abdfada0b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3947c74dbe74b58bc7359a1abdfada0b_JaffaCakes118
Size

441KB
MD5

3947c74dbe74b58bc7359a1abdfada0b
SHA1

fd5628a7eadc452f236d376407c1730892a8a814
SHA256

ff29df618a6c8390f8cc254b8930a3a140ba83722d67a202fc435022a18b195c
SHA512

cff8dcea51c38d7b2052a1c6b11089d248541052ccbe495c4f4b124ee1bd9ec1d26e2b2066cdcf5bf52614e57ee3d2b9bec98eeeccaed06da692b019bffdb2ea
SSDEEP

12288:uM9LBW1F6KlBuAcHIacvzfib4JjRmBmfp:uMFB1CoHIHLVJjMgp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3947c74dbe74b58bc7359a1abdfada0b_JaffaCakes118

Files

3947c74dbe74b58bc7359a1abdfada0b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f433e7fcc51e68080022754836705744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree

user32

MessageBoxA

Sections

.text
Size: 152KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

8ya91mf9
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

3oe3nuxm
Size: 216KB - Virtual size: 220KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

95o8cfmm
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ