67499972fd10306af7fffb508907a2fa_JaffaCakes118 | Triage

Sharing

General

Target

67499972fd10306af7fffb508907a2fa_JaffaCakes118
Size

252KB
MD5

67499972fd10306af7fffb508907a2fa
SHA1

ba249a0767cb3ca58ff51661e237c04bd3ac4beb
SHA256

f1c4c7a7a81cd08aa94a06b40c12e3295c23c59c9ebf4604a4d76e3a406f44f1
SHA512

7391f87e1172004b1d79552b2ac820783840e72431c526ec7b1ab9af6f03cb3936d6f84b379967faa6dce37a280f7ed68e3b8ebd490f6cb244ff93acf1a61d29
SSDEEP

6144:w5CP7S1HR0bUK9Iue5CIH4nifpVf/NcQ6TcnvmGymrUs:w5CDS1u4DF5xHR/cQ6TcnvmHs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
67499972fd10306af7fffb508907a2fa_JaffaCakes118

Files

67499972fd10306af7fffb508907a2fa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c0ca8fb524d53a294a75f3adfde9e816

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
ExitProcess
GetModuleFileNameA

user32

MessageBoxA

Sections

.data
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 247KB - Virtual size: 247KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_rsc
Size: 96B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ