70afb386e8a74febf53d5bc764c59c61_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

70afb386e8a74febf53d5bc764c59c61_JaffaCakes118
Size

78KB
MD5

70afb386e8a74febf53d5bc764c59c61
SHA1

b8e157039f77e66f9b8c4f6f811f8a9285634832
SHA256

9e7ad4b18cc4b9d770ce350632a17ff0e085fc7f717032bb033317d2a38be196
SHA512

62d04415ccfa519f6b107e15bab9f38ee2c1ccb1b7e8ee9cfdc509cf2940cb6cdb6b56bebbe8191dc066ca1260df952e91263647cd4de9282296f05db1b1cb2a
SSDEEP

1536:9tvmQC50xlVMjJ6vdyL19c46b4/223hd/TL:9tvm5efVMjJ6Vw9wghd/TL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
70afb386e8a74febf53d5bc764c59c61_JaffaCakes118

Files

70afb386e8a74febf53d5bc764c59c61_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1738985ef3490ee0e357401a5c199c8c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
ExitProcess
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA

user32

MessageBoxA

Sections

.data
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 4KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE