5c9fc4faafc5e0b1a2d8c00f612cd749_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5c9fc4faafc5e0b1a2d8c00f612cd749_JaffaCakes118
Size

2.3MB
MD5

5c9fc4faafc5e0b1a2d8c00f612cd749
SHA1

bcd8c2938e558efa1b9387e58b84abbb19be9316
SHA256

9b00e8ba2baca6ad84f13c75bf28d5f39a2e6a6a255fe9a8c0e6da258b37ad31
SHA512

ab0c793ae5ec94ba634ddd7642fa948809c4212046b4570ff97569a6cecbcc6283229f997c0cd9f0c0f0685c67a932e7c51b81f560319cb058c41c6391494cac
SSDEEP

24576:NWwT1d2z0/DrcC592bS5BzEmgADKoghcUAdZ0UpbINiZUiHmhyMDvPgcqr+uC6Uv:NFLTSG5qdgUiH0D/gYHVEM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c9fc4faafc5e0b1a2d8c00f612cd749_JaffaCakes118

Files

5c9fc4faafc5e0b1a2d8c00f612cd749_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f433e7fcc51e68080022754836705744

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 344KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

i08fq3zc
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 7.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.yjrcxdz
Size: - Virtual size: 396KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

bb4c512r
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

1346tto7
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ