62d0c7db8b7d91e656142bef758b50d9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

62d0c7db8b7d91e656142bef758b50d9_JaffaCakes118
Size

230KB
MD5

62d0c7db8b7d91e656142bef758b50d9
SHA1

a5118b8ccc30d1cfd01fc160cc445a2d0c4f9d43
SHA256

bfbdbb7259ce1609defa31b38a9a9544c3c0ddca6b6b02975454203040f8f2ff
SHA512

523ebd167e35f2f346597f2e505ed687e094a1f3ab88f5f058b308593efd581b9d5f4e2656ec926ae0a43f66717fd5af203f04f041f84c3bfe7e7df0d6a81c9c
SSDEEP

6144:AqTIcRd+cm8tzyI116321DHNCduyv343N7FZaCn:BdX88lyNZdnopF0Cn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
62d0c7db8b7d91e656142bef758b50d9_JaffaCakes118

Files

62d0c7db8b7d91e656142bef758b50d9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c0ca8fb524d53a294a75f3adfde9e816

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
ExitProcess
GetModuleFileNameA

user32

MessageBoxA

Sections

.data
Size: - Virtual size: 3.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 223KB - Virtual size: 223KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_rsc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ