7269b28025588ae2e0fdfcc5acdbf97e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7269b28025588ae2e0fdfcc5acdbf97e_JaffaCakes118
Size

10KB
MD5

7269b28025588ae2e0fdfcc5acdbf97e
SHA1

e17edf800bd7697f67ce8beddd2c6f303c1631c9
SHA256

d4f4c473535f53b2d0556e30652e9e4f991d90a80ee70b2b65d9e4d163525dc8
SHA512

72c7e0b441e1573397f6feeb801a6030d97e371be55d21e434d149eda6f90d392e2c96d1bb48099ac3d879b2799564e9d3064acd69a69dba1e144d476c69e72b
SSDEEP

192:8IumLQ95g3ozZPsmmpgBG9Lj1LC6FiMJ4cYKJ49ooTaE:zuHWYzMp8ILj1HJ4XKJ49o8B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7269b28025588ae2e0fdfcc5acdbf97e_JaffaCakes118

Files

7269b28025588ae2e0fdfcc5acdbf97e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c0ca8fb524d53a294a75f3adfde9e816

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
ExitProcess
GetModuleFileNameA

user32

MessageBoxA

Sections

.data
Size: - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE