4d9f3aa9dd2473b9f90a084b202e083f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4d9f3aa9dd2473b9f90a084b202e083f_JaffaCakes118
Size

297KB
MD5

4d9f3aa9dd2473b9f90a084b202e083f
SHA1

265890fba8c498752d072ccb66a8facd32b8f20c
SHA256

72b640431d395104f8c014abfbe259e42e025607e675f33b3046238ac400a63b
SHA512

560ee37552ee7e7dfaa8030cb5a438cb11f936d5dd9f329ff54d813f3e678c438d22dadb83696ccf2c3243178d0299f512af04ccbf1fc39444696bd42888bb0c
SSDEEP

6144:ksu5Hvma754684doNizrpoUfZS+12plK3FZ6LmJ3lu:ww4ciztJh91V6aJ1u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d9f3aa9dd2473b9f90a084b202e083f_JaffaCakes118

Files

4d9f3aa9dd2473b9f90a084b202e083f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

99f5b0b723d6fca2813f516623081e1c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualFree
VirtualAlloc
ExitProcess
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
FreeLibrary
GetLastError
CreateMutexA
LoadLibraryA

user32

wsprintfA
MessageBoxA

Sections

.data
Size: - Virtual size: 768KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 253KB - Virtual size: 253KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 512B - Virtual size: 511B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE