71244db7d7e9373b3f7a2596ac9acfdf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

71244db7d7e9373b3f7a2596ac9acfdf_JaffaCakes118
Size

75KB
MD5

71244db7d7e9373b3f7a2596ac9acfdf
SHA1

e9c0aac030f8c4ed74e01e56d419ee2a4e782449
SHA256

5393402ae3639151d8d64fa501311379bc4950fd87cefabd0f9e8cbc7d69d20f
SHA512

5925c7520db0373baf1deb55b6df0fee379215a61a7622fd6329f880fe20e83e8b737f82a6b569650f36d3d0ae5f0679ad097ac9e6783a7e53ca625d08c756af
SSDEEP

1536:TUo/T6yceEdfr0CL3fQlIr3bgkHAIGsULDFLlpQk5LxWNJQvjhug:TUo/T6yTYfr0wKk3bZ9GhpRekHs+dug

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
71244db7d7e9373b3f7a2596ac9acfdf_JaffaCakes118

Files

71244db7d7e9373b3f7a2596ac9acfdf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f433e7fcc51e68080022754836705744

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

lfobdx11
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

5tg54knv
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

6ljp6104
Size: - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rbni4.ly
Size: 65KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

itc1yueg
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ