39e195e7040ee6ae20c09e25de47c829_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

39e195e7040ee6ae20c09e25de47c829_JaffaCakes118
Size

388KB
MD5

39e195e7040ee6ae20c09e25de47c829
SHA1

126440ff6f8cd85e613c75fac53873de57a41bfa
SHA256

c17eb86f934a3e4e754f36851dd03dc0d00643a1ef4981c3b29b7066d962f341
SHA512

289221d1f07579dfe3c52debbcf2b8cef5a1b93e5658e592e787cb77f85e4e636b15862175c8df69c1b18b8236a584a83bb0dd33df6e96fa37d84b2627793b27
SSDEEP

12288:Yk5S++rbtSPNelCP4FgQb4h4qQ+lHuMkr6qZnO:YB3gPSC4bb4h4D+Vkr6qZO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
39e195e7040ee6ae20c09e25de47c829_JaffaCakes118

Files

39e195e7040ee6ae20c09e25de47c829_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6e1f282449492d5fc7a87e6f1c3ced5d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LocalAlloc
LocalFree
GetProcAddress
ExitProcess
LoadLibraryExA
GetModuleHandleA
VirtualFree
VirtualProtect
GetModuleFileNameA
VirtualAlloc

user32

wsprintfA
MessageBoxA

Sections

.data
Size: 349KB - Virtual size: 776KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 5KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_rsc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ