73e5849b85d9b5c1d6e9f065524ef672_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

73e5849b85d9b5c1d6e9f065524ef672_JaffaCakes118
Size

873KB
MD5

73e5849b85d9b5c1d6e9f065524ef672
SHA1

b954119317611271a5a25410c3578db6d9686168
SHA256

a8e5c784f647e8afc6766a21c067748fd86924c8499974f45af3a6388c728de7
SHA512

3251888d51ff74619113a17e8035f0100341b0f7c5779fae0bb14fb25ed983e6445fa988f5419ab99489becbecb39d1b1e711c02f1a926e36fc45bd8cf78e78d
SSDEEP

24576:qLUqvX8S2TPI8fVNGffQD3oisym0RQzpE6WZh:q4a8N8mKAsfPe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
73e5849b85d9b5c1d6e9f065524ef672_JaffaCakes118

Files

73e5849b85d9b5c1d6e9f065524ef672_JaffaCakes118
.exe windows:1 windows x86 arch:x86

e2649837c59f87885ca4eb82bebd799b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
VirtualFree
GetProcAddress
EnumSystemCodePagesA
GetModuleHandleA
ExitProcess

user32

DialogBoxParamA

Sections

.code
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 282B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ