4a966bbe9aee826e06385456fa9566fc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4a966bbe9aee826e06385456fa9566fc_JaffaCakes118
Size

277KB
MD5

4a966bbe9aee826e06385456fa9566fc
SHA1

343fc1b5167fca8861fa8ba683d6902a8f6ec1f7
SHA256

23e5c950d031810bfe4273c0eec5db8274241f72ee5da764b97ef896e81c03fd
SHA512

9f00ccb8d4f055c45236bf6853fc6cfbd037fa5d271d483fc184969de9b95022f95c3817b3b133d1cd6baa67cdd1366e439c314715e6c8487211ea04fd46ff00
SSDEEP

6144:azZp37AXG7A7/rWCmWQBIAOeexNrGAV7IO+yoV5DQb5iOvQOM80:azZ9O/T7QeAOeenGAVtfvb5iOnM80

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a966bbe9aee826e06385456fa9566fc_JaffaCakes118

Files

4a966bbe9aee826e06385456fa9566fc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

99f5b0b723d6fca2813f516623081e1c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualFree
VirtualAlloc
ExitProcess
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
FreeLibrary
GetLastError
CreateMutexA
LoadLibraryA

user32

wsprintfA
MessageBoxA

Sections

.data
Size: - Virtual size: 296KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 266KB - Virtual size: 266KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 864B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ