3a28c6aacd1cd68160a4e0e96d828b3e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a28c6aacd1cd68160a4e0e96d828b3e_JaffaCakes118
Size

743KB
MD5

3a28c6aacd1cd68160a4e0e96d828b3e
SHA1

09939f83fe8129fa16012c01fdfcc065b9aac33a
SHA256

d015894faae4f173a4caf8397fe1ba87f378caa78291ff6bb9846fe8f4225354
SHA512

e9727150a816a8d292b6a1a30b912b6fc76c848f326defaa30df04c33e303569680391729f5664f1add2f2f4b74ff2d3633e9bcb4ab95b0e5dfebbbd3a4d9a65
SSDEEP

12288:eJcXYcW/ZszzNwqd1Iloq1ccDOabMFrjirVcvU472FxNBgs5rzFBEZObcU7Jyk0W:ZI/ZszCq2c9FreAUvvxB8UbcQc5L3UvP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a28c6aacd1cd68160a4e0e96d828b3e_JaffaCakes118

Files

3a28c6aacd1cd68160a4e0e96d828b3e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

372cb1afc2a93c932bf474b9fcb8cb7f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LocalAlloc
LocalFree
GetProcAddress
ExitProcess
LoadLibraryA
GetModuleHandleA
VirtualFree
VirtualProtect
VirtualAlloc
GetModuleFileNameA

user32

wsprintfA
MessageBoxA

Sections

.data
Size: 367KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.asprsc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ