612cd06161a4b06a0d56a86920a3ad7e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

612cd06161a4b06a0d56a86920a3ad7e_JaffaCakes118
Size

272KB
MD5

612cd06161a4b06a0d56a86920a3ad7e
SHA1

0401dab06fd93d11ea6a2f8e2fcbbd50fef898ca
SHA256

434d3c00705c5f53ad021114d2d863a742ca6cc7c4a6b48d5d34b485619fbb07
SHA512

24def3bbbca24ea9e586fac5c9099898690ea2f25e294ede15bc2edae8da1465113893ffcac6ba732e444fa71fe0d206b2f75bf18eaf664c0cd0b255ebe34b1a
SSDEEP

6144:LdPHehBLKm7o8ZThfhsoHtWkdu57NCsas+gBMQRbCby2:LET08ZTFPkkwRCpKBMOO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
612cd06161a4b06a0d56a86920a3ad7e_JaffaCakes118

Files

612cd06161a4b06a0d56a86920a3ad7e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

536c35e361b8b671498d1baf00bbbda5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
ExitProcess
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
GetLastError
CreateMutexA

user32

MessageBoxA

Sections

.data
Size: - Virtual size: 816KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 251KB - Virtual size: 251KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ