3f6477c7456a2aa981fdff715c0191f1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3f6477c7456a2aa981fdff715c0191f1_JaffaCakes118
Size

326KB
MD5

3f6477c7456a2aa981fdff715c0191f1
SHA1

143bc6666ce1b624a32a4124a3e9f559d50081d5
SHA256

587aae1803c6e1f99bff2a4d7f5b6eb25534af96ca86cf33d821d7f275f4ecd5
SHA512

fa328c2794cdb1d81987289c8a6dbd727956ab5dd0f56e43bd63220afaf20afb02bb99240f3a532a2ba037475bc891b3a2a195b1a833c1602e16dd4ffc32a505
SSDEEP

6144:VlXACGg6Vh6Pt7PkWn8El8wEbh1WmgFc244DtPL05BUqo8VTSGUrkF5CEwrj:Vxd6VItLkW8lT3244JL0r1yrkqEk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f6477c7456a2aa981fdff715c0191f1_JaffaCakes118

Files

3f6477c7456a2aa981fdff715c0191f1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1738985ef3490ee0e357401a5c199c8c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
ExitProcess
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA

user32

MessageBoxA

Sections

.data
Size: - Virtual size: 536KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 320KB - Virtual size: 320KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE