6feed8eb13c8aaa0c2393690ff0b93b8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6feed8eb13c8aaa0c2393690ff0b93b8_JaffaCakes118
Size

236KB
MD5

6feed8eb13c8aaa0c2393690ff0b93b8
SHA1

d7a77fa072f80f994c451197dac8a94434824d88
SHA256

406ffa32228c64e0132dcf16d71822b73806375ff45bfcf5be78bbc92c2f1838
SHA512

f83482343f70c6539b7465d121d4f42b0f8f93cca309d894df71d15dc3e0723f7eb82b11d5b020fe6c6d5f8d95bcd78945063593d33ac2673aa19d0b78aa9ca4
SSDEEP

6144:bnlbsZKiQE22aRnwDuMd0DOwZyk+5bzKCk7fQuERAYwlgM0DmkHtr:bnl6cwj4ZMlKCot7lglDFHtr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6feed8eb13c8aaa0c2393690ff0b93b8_JaffaCakes118

Files

6feed8eb13c8aaa0c2393690ff0b93b8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bd227ba966c127e93fe82f25f211eaca

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
ExitProcess
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
HeapAlloc
GetProcessHeap
HeapFree

user32

wsprintfA
MessageBoxA

Sections

.data
Size: 221KB - Virtual size: 656KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_rsc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ