71e6c47565da997b62eac338fc69381e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

71e6c47565da997b62eac338fc69381e_JaffaCakes118
Size

47KB
MD5

71e6c47565da997b62eac338fc69381e
SHA1

0ef70cc3b4f09da7d5c455416e343f7a4b2679cc
SHA256

35cc3a8682085fdbf201389bb23cd0e303cf68b7eac513d19e02f30448d95170
SHA512

517f852e2054be9781450e659d3862b2aa71221712a46e083bd391d194fd8e927edf915a3aa4e48d3486e2eb95fd8003990ef3f47610122f41140d87f15c5521
SSDEEP

768:G6gIKCoTg2j3/wnPB2NwJIkWIqZ5Rxckh6uyqKtgU1rH8puiqYSc:TzKCoThPwnQN6Gl5Rd6uy31rcp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
71e6c47565da997b62eac338fc69381e_JaffaCakes118

Files

71e6c47565da997b62eac338fc69381e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

99f5b0b723d6fca2813f516623081e1c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualFree
VirtualAlloc
ExitProcess
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
FreeLibrary
GetLastError
CreateMutexA
LoadLibraryA

user32

wsprintfA
MessageBoxA

Sections

.data
Size: - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 424B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ