67694ddc1b6703a47af6d101bc96f62f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

67694ddc1b6703a47af6d101bc96f62f_JaffaCakes118
Size

389KB
MD5

67694ddc1b6703a47af6d101bc96f62f
SHA1

92db84cf0a88aaa25379c4593696d181c8970c8e
SHA256

def85c923ffefa08765349c4e32b48c61b594fa58b426551f8d1626343c47934
SHA512

acd77bd64c59801921213b7adccfff73f5cc50980e959c7802d0492780a0c602bc31afbc12458b257f55fe44c3d144aede8061e6f28ab9d0683e95db64f1ecc6
SSDEEP

12288:FtdSFfzl/vt0gj1VFeCBeZPaSTLVhHo2khXctrO:Ftdah90ghNBmVVoOpO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
67694ddc1b6703a47af6d101bc96f62f_JaffaCakes118

Files

67694ddc1b6703a47af6d101bc96f62f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bd227ba966c127e93fe82f25f211eaca

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
ExitProcess
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
HeapAlloc
GetProcessHeap
HeapFree

user32

wsprintfA
MessageBoxA

Sections

.data
Size: 379KB - Virtual size: 868KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_rsc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ