5a941210449a4aa0468d6fb192fb901f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5a941210449a4aa0468d6fb192fb901f_JaffaCakes118
Size

700KB
MD5

5a941210449a4aa0468d6fb192fb901f
SHA1

6fd531234a592ac306cb7bdeb8c7383e37408462
SHA256

1cece5c6b629db36c530398a951b2df8e1b23d061e7e0e69013f291a846bbdcd
SHA512

4e4b7d592dbb3d92983d8b174c71a105e35e542d8b1f741de808ed9eaf03167691c91ce7e56d3d0b0742e5ddb8d9302668a6e56962e73aee916eb7d74b3937b6
SSDEEP

12288:zrkrht5o7hy9gmm00hD9+Sg18tnBD4YrBVLQwKFDq4MtT4CDYoYLkjy111:zrk67hcEv+50nrBd/KF2xECDY8c11

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a941210449a4aa0468d6fb192fb901f_JaffaCakes118

Files

5a941210449a4aa0468d6fb192fb901f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

58708828d5c31968bd59859804ecde67

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
GetLastError
CreateMutexA
ExitProcess
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA

user32

MessageBoxA

Sections

.data
Size: - Virtual size: 121.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 693KB - Virtual size: 693KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE