66c35c6856f27ae8c89c3ab1cd65d88b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

66c35c6856f27ae8c89c3ab1cd65d88b_JaffaCakes118
Size

370KB
MD5

66c35c6856f27ae8c89c3ab1cd65d88b
SHA1

41b83ad86626dbc0e1df878fa8baa604bb82eb78
SHA256

396c8e9c532de3738091ff2b24a22304c9a14dbaba602d629f62ea52f215f8f2
SHA512

1da215d0090d667bebe61c13d426a602e520dd61eaaa8b70be52b759b0fbd4e7fd326267fd98bf9829819868472444b3935a1ab04fb8d9e187dca235107c18de
SSDEEP

6144:7uwo9G9dWH8eOYSM0WfziyfxIe+iF2M/IO+j9h+xHGLYDab9VOjstVUOxyYA:KBPORCziHG7yAt3iqjstVUYyH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66c35c6856f27ae8c89c3ab1cd65d88b_JaffaCakes118

Files

66c35c6856f27ae8c89c3ab1cd65d88b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6e1f282449492d5fc7a87e6f1c3ced5d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LocalAlloc
LocalFree
GetProcAddress
ExitProcess
LoadLibraryExA
GetModuleHandleA
VirtualFree
VirtualProtect
GetModuleFileNameA
VirtualAlloc

user32

wsprintfA
MessageBoxA

Sections

.data
Size: 359KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 5KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_rsc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ