7631aea88dc24773facd8e97658180ba_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7631aea88dc24773facd8e97658180ba_JaffaCakes118
Size

504KB
MD5

7631aea88dc24773facd8e97658180ba
SHA1

dcd1270632f7761eee40566ad62e963bd58a0bfd
SHA256

896fe6e486c7923421279e1c421ee801490c01f1b0ac1d38f18218645ad826e8
SHA512

a1323720081ff1f42f27c3d0794e448422c64ca57633a5e891bd4b3511f653aa59870bb78067256a5f464dbfe4deb0e2269e60122b6efe8a1ec834a0b8d2d912
SSDEEP

12288:9z1m4hGYKXiXd12bqM/enj5QTbSaRTnswloyp82bQK52k87uyG6/h:7mhVXW1Yz2dQT9nsw+ypr52k87uyrh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7631aea88dc24773facd8e97658180ba_JaffaCakes118

Files

7631aea88dc24773facd8e97658180ba_JaffaCakes118
.exe windows:4 windows x86 arch:x86

acd9fa3a74cc4c1d92998e6ad62eeb8f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualFree
VirtualAlloc
ExitProcess
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
FreeLibrary
LoadLibraryA

user32

wsprintfA
MessageBoxA

Sections

.data
Size: - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 489KB - Virtual size: 489KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ