4b11baaf2c6413f21c479fdb922e9554_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4b11baaf2c6413f21c479fdb922e9554_JaffaCakes118
Size

587KB
MD5

4b11baaf2c6413f21c479fdb922e9554
SHA1

12de544b1664dc1cbab4ee01ca545ad6802727fd
SHA256

289690ad4a8c8328eab74f7d94460d826d3fff66d48e944f3726cbc95f5a23ae
SHA512

13aae0fe712b5e54ac4216153748f610ff958cdd630aa16548be7b3f639c8ea8739d855c26d55314ab2a967d7386bea8cc9d493262487fa1443251fb5bf0655b
SSDEEP

12288:r/h4qZYzGqryxoISyGiVzdBQLLqaGnogk0RJOxTX+42O:r/h47GiI/G+zdBmqa2MDXi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b11baaf2c6413f21c479fdb922e9554_JaffaCakes118

Files

4b11baaf2c6413f21c479fdb922e9554_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6e1f282449492d5fc7a87e6f1c3ced5d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LocalAlloc
LocalFree
GetProcAddress
ExitProcess
LoadLibraryExA
GetModuleHandleA
VirtualFree
VirtualProtect
GetModuleFileNameA
VirtualAlloc

user32

wsprintfA
MessageBoxA

Sections

.data
Size: 538KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 5KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_rsc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ