433f955e56e29ba3dea7f32e1164b167_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

433f955e56e29ba3dea7f32e1164b167_JaffaCakes118
Size

16KB
MD5

433f955e56e29ba3dea7f32e1164b167
SHA1

ab73ed3c12678e92b36fad863c2bebd60ccd5836
SHA256

c949845285812293d9d0b62d32d7ed4b2b779f56b41fd677cd29d682bd5a018b
SHA512

537ff86bd18e1568416859ed94adc50198e96e661b734047de14d8ef4e40f1fe0654f6e92c3db8262c07b1f3e9137a64a2240feadda590906abc66b70a4ecad6
SSDEEP

384:38LEROCCjeQg9V52MWLkBdXww5w2aMKJ49oy5ayV5r:38LU9o6qMWYB09tcZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
433f955e56e29ba3dea7f32e1164b167_JaffaCakes118

Files

433f955e56e29ba3dea7f32e1164b167_JaffaCakes118
.exe windows:4 windows x86 arch:x86

acd9fa3a74cc4c1d92998e6ad62eeb8f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualFree
VirtualAlloc
ExitProcess
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
FreeLibrary
LoadLibraryA

user32

wsprintfA
MessageBoxA

Sections

.data
Size: - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 248B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ