5f8fc2639c978006641cdfce2661a8db_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5f8fc2639c978006641cdfce2661a8db_JaffaCakes118
Size

435KB
MD5

5f8fc2639c978006641cdfce2661a8db
SHA1

7f8ba57598161fa411b2b2707cf74614d8353aa2
SHA256

0a348a6036bc77e050ac90ea186b8733b82990c2d4594aca5d2cf693019ba50c
SHA512

f519ca0edd6d38470873001479998cc7df655f5655957b48e1196eb7673bba51906a444db1ae810a17c59f595dfaff2f92d203cbec0dfa03dd8fdfa2d17202fc
SSDEEP

12288:u6tBDF6KlCuAcHI1eVTxO9sDNyc8Mcu3/989gX:uYBECRHIMVNvL8M3F8E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5f8fc2639c978006641cdfce2661a8db_JaffaCakes118

Files

5f8fc2639c978006641cdfce2661a8db_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f433e7fcc51e68080022754836705744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree

user32

MessageBoxA

Sections

.text
Size: 152KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

jyksufrw
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

zu5iqw27
Size: 209KB - Virtual size: 212KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

vu0b9nfj
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ