4c0d7e9fcec0215e6d31a40d5b4eaef4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4c0d7e9fcec0215e6d31a40d5b4eaef4_JaffaCakes118
Size

832KB
MD5

4c0d7e9fcec0215e6d31a40d5b4eaef4
SHA1

427ba0b557f5683cb736a8bc168085f907627877
SHA256

6caa1020d703ebd246e1e925dc89280e8939ad9803496903a97b1267d05a767e
SHA512

9f796b3d4f2a049bbc9de73fa5af079c39ce76f1a86c5ca47cfe5e968b36c1f70dd2b9a2775e41371a769c7683471998eef6ebca002aec8b06adc98015e80edb
SSDEEP

24576:mXqeXyqg0kAKtTrKcPwkVRKKtR0uzGuWl07:mX0G82cPwcQKt/Al07

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c0d7e9fcec0215e6d31a40d5b4eaef4_JaffaCakes118

Files

4c0d7e9fcec0215e6d31a40d5b4eaef4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c0ca8fb524d53a294a75f3adfde9e816

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
ExitProcess
GetModuleFileNameA

user32

MessageBoxA

Sections

.data
Size: - Virtual size: 10.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 821KB - Virtual size: 821KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_rsc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ