7294a84e4f677d270e677a9464036465_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7294a84e4f677d270e677a9464036465_JaffaCakes118
Size

292KB
MD5

7294a84e4f677d270e677a9464036465
SHA1

89f35fc62ecbb8c935f80e7c62d4e7d90ca720bf
SHA256

41448f5ff6389d2e4cc1917c58df6441847ca88e28982b3e79cb911717321aa6
SHA512

83faa4cbf6095d0ddd5383b6d8a0e907f1aad5a85c364f6144a3a7519ef84707cf8e9df65f74bb055418b56390820aaa2eb9fe66826e52e71962d0e2ef123d7d
SSDEEP

6144:NYYj6cU1fdoboPBrAmNmUX3E1e1lOmZW6udFN5ADjKdLF9KG:7ucU1fHBUAtlZQFNmDjKZFwG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7294a84e4f677d270e677a9464036465_JaffaCakes118

Files

7294a84e4f677d270e677a9464036465_JaffaCakes118
.exe windows:4 windows x86 arch:x86

05c834740a9efecae9ce2cb725361c9c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
UnlockFile
ExitProcess
LockFile
CreateFileA
GetModuleFileNameA
GetModuleHandleA
LoadLibraryA
VirtualAlloc
lstrcatA
lstrcpynA
lstrcpyA
GetCommandLineA

user32

MessageBoxA

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 424B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 308B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 276KB - Virtual size: 275KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ