4759e41168f29c63bbb494fa796ee42e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4759e41168f29c63bbb494fa796ee42e_JaffaCakes118
Size

2.3MB
MD5

4759e41168f29c63bbb494fa796ee42e
SHA1

09f830ff6feb80d14b79344871707153ec249f69
SHA256

afb63776eb29590d72e50ecb65a4d2825ba115c31ae440a0231f156280804491
SHA512

59b1f8472d23e4c59e9d81e99f8686cc4300be1e2c37520972ec8f323e3a9f68f6d995eba97e735b012ddb0f5d1222d85617a8ba8ae8f7c9c21d9d25655d678b
SSDEEP

49152:AGQBsvN7sgT4OrRoP40UWu0D/gYHVEumn:uBsN54GoP40/u0D/gYE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4759e41168f29c63bbb494fa796ee42e_JaffaCakes118

Files

4759e41168f29c63bbb494fa796ee42e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f433e7fcc51e68080022754836705744

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 344KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

gzsntvl1
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 7.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ag42z802
Size: - Virtual size: 392KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

iqmho0rd
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

xv50mlax
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ