692941bec6a0f78a9f429917c1e29809_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

692941bec6a0f78a9f429917c1e29809_JaffaCakes118
Size

82KB
MD5

692941bec6a0f78a9f429917c1e29809
SHA1

68e0600ae606739ad7eaf9da30f4078a1ce76b2c
SHA256

268022590fe00f13105d0d71db2838cb8690e3088c5dab9bbf6ec995f76f8b0e
SHA512

84bcb273b5ac9882d04ac7cd4144c2692db7f9b3393ce549b27e4ff7ec237f52c92ac1b630d8f8d4a30dacf89f58a7bf18a8eb768be95e8797531f0135a3f897
SSDEEP

1536:iDnBb5lJhJLuu3yyJuFVF+IW0VeGb2/RhNdWIMOPw2S8cwq0+Z5ockIKf4Uys:i9b9gEMF+bW9URRWykl0+kxD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
692941bec6a0f78a9f429917c1e29809_JaffaCakes118

Files

692941bec6a0f78a9f429917c1e29809_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f433e7fcc51e68080022754836705744

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

9e7ura2f
Size: - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

vkod92if
Size: 77KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

0g.3j4s.
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ