644922df4d18459c9b68c3b8c8cfbe57_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

644922df4d18459c9b68c3b8c8cfbe57_JaffaCakes118
Size

55KB
MD5

644922df4d18459c9b68c3b8c8cfbe57
SHA1

201d9cded92e6451bd098d6e958d8ec7398ac6d6
SHA256

1a44c608b03aa5d1189814d31d1e6518b77be9c701bdb7dda63bae4c2ae5360c
SHA512

b28714f5938a36fa8aad7d0e43f96cafd1cf446730052db53d0db4bb348eb63cd956ea5731612c0f6effa0d922a5f253acb88f4e3d20c450d7114a2e9da591ce
SSDEEP

768:NMKsW5QEYMdk3VpqnfaCrekp+potX24H3DRgiSlmmmbeskhx8Hvc5gI0m04F4C9x:tsSVYVVUnfb6g+psTH37s5g8TEi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
644922df4d18459c9b68c3b8c8cfbe57_JaffaCakes118

Files

644922df4d18459c9b68c3b8c8cfbe57_JaffaCakes118
.exe windows:4 windows x86 arch:x86

58708828d5c31968bd59859804ecde67

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
GetLastError
CreateMutexA
ExitProcess
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA

user32

MessageBoxA

Sections

.data
Size: - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 5KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ