6901650c6b2966bd8e0c36fce668a92e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6901650c6b2966bd8e0c36fce668a92e_JaffaCakes118
Size

520KB
MD5

6901650c6b2966bd8e0c36fce668a92e
SHA1

5f14a0bcf6829ae0162620ce7fc6c984c8d82e3f
SHA256

132b52f06c75852078e512f34073c9e0f0eda0520855d0118ef66d25cedc5aea
SHA512

b4e10ea856d4ce5031d963e16b7890ffd0b5ac410601691ff646a571176202307be9371b2899babcdeb7b1cc76dd3866b7853b6ea2a83e28fde02a0ca7ee9170
SSDEEP

12288:FiB/25RmlWAedfDF0fl3fxK7ic/AFh8CUjenSpZ8JH5:FA/O2WAedf5GlrUedZ5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6901650c6b2966bd8e0c36fce668a92e_JaffaCakes118

Files

6901650c6b2966bd8e0c36fce668a92e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bd227ba966c127e93fe82f25f211eaca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
ExitProcess
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
HeapAlloc
GetProcessHeap
HeapFree

user32

wsprintfA
MessageBoxA

Sections

.data
Size: 513KB - Virtual size: 532KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_rsc
Size: 256B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ