487729cd4b165ddbee7fa160580470de_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

487729cd4b165ddbee7fa160580470de_JaffaCakes118
Size

8.2MB
MD5

487729cd4b165ddbee7fa160580470de
SHA1

b795c948921380bf927675e36c2be110c7a97471
SHA256

c8f4f65cf9e6d88b52fe130edeaa1759eb92eb3345f62b187305b7f7bee45b22
SHA512

d53f362e8d41f3931c8e8975cec7d7e71e44f187b5590f5aba2799d754285f1cb25daf53f2976c24a9e21d2d93f447dc46c60fe53afdf658f04355eeda35c63a
SSDEEP

98304:EY0zIkZMSVIfOZOFGp6JlTgv76T0UO8l9/f:R0zILg6OZOsp4sqfD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
487729cd4b165ddbee7fa160580470de_JaffaCakes118

Files

487729cd4b165ddbee7fa160580470de_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f433e7fcc51e68080022754836705744

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree

user32

MessageBoxA

Sections

.text
Size: 340KB - Virtual size: 340KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

c18ozw85
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 16KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7.4MB - Virtual size: 7.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

a.tkepog
Size: 396KB - Virtual size: 400KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

3qsfq9ud
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ