5fc3031be52e7e80627dc60e17944956_JaffaCakes118 | Triage

Sharing

General

Target

5fc3031be52e7e80627dc60e17944956_JaffaCakes118
Size

371KB
MD5

5fc3031be52e7e80627dc60e17944956
SHA1

d859c4048843db6f98f3691303fc7cb552cf040c
SHA256

89b9ccb021439a6cdbb12cc0bf9ffaac9a201f83ce6e98e7c5192ce40479e2bf
SHA512

e713a225c4ca86309574bcdcffed47828aafa5e1520b25ee3504ddf440ed87c2fb8b1d8fa36f2e5ae10ecd97bb6e53cedae55e98bd376313814184cb78c89572
SSDEEP

6144:rDNcDHqSg2e369JhEIbrdSkJ0UbZARbE4McNFB6XL01zb0kEu8MwacB+MFeIZT+6:tcT3Lf9JhEedSkJjZARgAFIQBIkEFMwZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5fc3031be52e7e80627dc60e17944956_JaffaCakes118

Files

5fc3031be52e7e80627dc60e17944956_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bd227ba966c127e93fe82f25f211eaca

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
ExitProcess
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
HeapAlloc
GetProcessHeap
HeapFree

user32

wsprintfA
MessageBoxA

Sections

.data
Size: 331KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_rsc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ