4d1a55f66369032a00a799891fc744e4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4d1a55f66369032a00a799891fc744e4_JaffaCakes118
Size

364KB
MD5

4d1a55f66369032a00a799891fc744e4
SHA1

9578a7177ce951c956279334ba908f7990656732
SHA256

7953833680bc7e06a87f09ef8a09be2cf78efb061edba1a8b9bb37700f24ad9f
SHA512

6f72767680cce1903210b47d7416019076a5dabcea1fd28622cfa707279d247d0ec8068e6e6ebc72d51393e5845f59ed671d75f55ab35935a2e9f46816861632
SSDEEP

6144:vUbM/vnEUUNAh+nALxAuvfDy8f2P5AQ1ycUf3IrfGTBQBcJjl/:vUQXI4+4muTyb5AxvQK9McJx/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d1a55f66369032a00a799891fc744e4_JaffaCakes118

Files

4d1a55f66369032a00a799891fc744e4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

46b0675c1fd7681c7b19a1c83d5aff83

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
ExitProcess
LoadLibraryA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA

user32

wsprintfA
MessageBoxA

Sections

.data
Size: 325KB - Virtual size: 832KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.asprsc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ