6a8d85ce55f4763b847c7b21399f07bc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6a8d85ce55f4763b847c7b21399f07bc_JaffaCakes118
Size

970KB
MD5

6a8d85ce55f4763b847c7b21399f07bc
SHA1

e4219d57293e39ebded3912b384e5bd7f9af131d
SHA256

743b9fa4e10b8fd6fb31e90754fcb13831ceb8080b1e9be5903755e957380331
SHA512

c30542f00ace40b13d543e3ba1552915b0a431022d6b0c4c70ae882a95023f4ae6e535c404585e38a25f1ee806c0a144979c0abfb64aca3de9ec2068fd6aeb53
SSDEEP

12288:Rqi3MAxGQ3BdOukFfY+F1ldsui3hBToRYnsXtVa3N:RqgPGQ3BVkpY+F1ldsui37ToRtM9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a8d85ce55f4763b847c7b21399f07bc_JaffaCakes118

Files

6a8d85ce55f4763b847c7b21399f07bc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f433e7fcc51e68080022754836705744

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

qn52w2xe
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 824KB - Virtual size: 824KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

2wg4s.bl
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

2rbpp7dk
Size: - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

o36nw1mq
Size: 145KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE