701e4af5b561f821560fcd7ea3a26147_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

701e4af5b561f821560fcd7ea3a26147_JaffaCakes118
Size

9KB
MD5

701e4af5b561f821560fcd7ea3a26147
SHA1

fcd4c11a070f88ce70045ef99f05c53b7a28e4e6
SHA256

47e491d34daab03cb0f3cb80f0c5802fea56f1696e164137a6c947302be18a67
SHA512

1f0113189a139d6fa66c823bf82e74ded3a82f89ef885b9fbde987dca5581b06aefc4747bdcfc0038316213dd22dfd4d7e8ba92eef476815e082920dee9686b6
SSDEEP

192:oTRqrMXU3IMZX9aljDArNJ4cYKJ49ooKAAm:o+93IIa5Ar4XKJ49oV+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
701e4af5b561f821560fcd7ea3a26147_JaffaCakes118

Files

701e4af5b561f821560fcd7ea3a26147_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c0ca8fb524d53a294a75f3adfde9e816

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
ExitProcess
GetModuleFileNameA

user32

MessageBoxA

Sections

.data
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE