59d5e9f12984d3140a8e4bdd5c23eb93_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

59d5e9f12984d3140a8e4bdd5c23eb93_JaffaCakes118
Size

84KB
MD5

59d5e9f12984d3140a8e4bdd5c23eb93
SHA1

2abda988af36e0189c3bd956177c5625f88a94ee
SHA256

20fe49fa3433f6378f04753d1cf4ae16deaaae434d3e25cc3f958824133f7745
SHA512

574f90b213cea1b1f5bf87a75172f44f32720e160e4cf43140625c59a690c1babb3654efb1463a07f67674d5065c641d0be4c93a42d1984235792e961fafc78d
SSDEEP

1536:dh2LS1S3gJEHkQbJHG/6vMW7Dr+N9q9RLSmzJR+muWQAoLlzK:dhpArbFVlON9QSmzTuWQAoLFK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
59d5e9f12984d3140a8e4bdd5c23eb93_JaffaCakes118

Files

59d5e9f12984d3140a8e4bdd5c23eb93_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f433e7fcc51e68080022754836705744

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

9cl6k8nc
Size: - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

w8gj1fsz
Size: 78KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

l22wfxyn
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ