709c955a841a3cd4e9dd8710da5bca15_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

709c955a841a3cd4e9dd8710da5bca15_JaffaCakes118
Size

234KB
MD5

709c955a841a3cd4e9dd8710da5bca15
SHA1

897ff1ced3a2c5178ddd1cc4cd24a9b1f7f9fc42
SHA256

8c172dd6b1e8e2f701557f328a68bd9fe0684610ca25c3e039d40b18ba374c2e
SHA512

c652a67dba90be8e72766fa588e2504d1f0cb558e3d70ec9b3e7acda802b0d16013cd0f47bf13f45dd7b319e0d6dfaad346e638332cce3ba2bacb2e9fa9ed014
SSDEEP

3072:vGZve+QkyOZ/HMOn4aVkXOy2qIUDw5MARUzaWrU6TzhM9OYs7aj/jlwc/kBwD6Cs:vwFUSy2qIazaWrUO9z+jlwQIA86Wv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
709c955a841a3cd4e9dd8710da5bca15_JaffaCakes118

Files

709c955a841a3cd4e9dd8710da5bca15_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c0ca8fb524d53a294a75f3adfde9e816

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
ExitProcess
GetModuleFileNameA

user32

MessageBoxA

Sections

.data
Size: - Virtual size: 428KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 226KB - Virtual size: 226KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_rsc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ