713d6211d6f54b5f2f7d42fef69e8142_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

713d6211d6f54b5f2f7d42fef69e8142_JaffaCakes118
Size

62KB
MD5

713d6211d6f54b5f2f7d42fef69e8142
SHA1

11c06195837915df5f073d6128db1b5f53e17d13
SHA256

1a49ad7adb28cede85554660aa9f061653fce29ede2476173a8924015b6719b0
SHA512

5fea49b3261a5499162ab4e73e88d27c1519461676ae097410b810c2311bb2839097aef58ae58701109777a3185e991ec945faddbcedc3219f94c8ebabbc4f51
SSDEEP

1536:USr/Dl62J/D3UDa1eqyw4rlI0oqVkrQvGrwJaR:UG/Dl6grzIzwc9olr3wJM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
713d6211d6f54b5f2f7d42fef69e8142_JaffaCakes118

Files

713d6211d6f54b5f2f7d42fef69e8142_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f433e7fcc51e68080022754836705744

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

uam5ndyx
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

vdzh4m6c
Size: 83KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

93od.w61
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ