4b3d8a5588dc0c9792e80dee3407d913_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4b3d8a5588dc0c9792e80dee3407d913_JaffaCakes118
Size

10KB
MD5

4b3d8a5588dc0c9792e80dee3407d913
SHA1

4d5f4a2d115f6096e26ea2e959a5ee6e11174aca
SHA256

0a86025ddd0068a59a05f80b4d787c1ed3469784c2783961f5e2647a67c7cc30
SHA512

2f1b408c1005bfe82ea158355da7b79a65bdd62c14291fdb5c608cdad9be47a230384ba508d3ec7fe67ce3026ff95c9300ff75f67c411c26c8f165f45b20b35b
SSDEEP

192:JGBzYl6xDEpJmpj1ywaSjgsq+h98qkTTDOiXnbYYKJ49oozdV:Jaoqgq1ywaSjgX+vLkTTKiXn/KJ49ouj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b3d8a5588dc0c9792e80dee3407d913_JaffaCakes118

Files

4b3d8a5588dc0c9792e80dee3407d913_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1738985ef3490ee0e357401a5c199c8c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
ExitProcess
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA

user32

MessageBoxA

Sections

.data
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE