4ace0d5afcc224ebef092e56feb19245_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4ace0d5afcc224ebef092e56feb19245_JaffaCakes118
Size

59KB
MD5

4ace0d5afcc224ebef092e56feb19245
SHA1

466b1ae75faef12ce4e186ea5b21d7a8ee97ffbc
SHA256

a00ff32ae0af15cf34c4fe14d015a1b34187f252381c46db76e7164ae13d9bb3
SHA512

3cffa647a5cdab4e421ed4acb0d85e20929d8e3a1b5fe7dcc41caa15aca0856ccea55ef4f4c68da30db1f41943f7b5830c26178f412f84870f60da067a445c02
SSDEEP

1536:SjdRG7mTtoskhsXpA2u+Egll2aPHncOAjx+g:yPGaSXmS2ltlQajU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ace0d5afcc224ebef092e56feb19245_JaffaCakes118

Files

4ace0d5afcc224ebef092e56feb19245_JaffaCakes118
.exe windows:4 windows x86 arch:x86

58708828d5c31968bd59859804ecde67

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
GetLastError
CreateMutexA
ExitProcess
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA

user32

MessageBoxA

Sections

.data
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ