742447efec98440fc5a0007a7406adbf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

742447efec98440fc5a0007a7406adbf_JaffaCakes118
Size

68KB
MD5

742447efec98440fc5a0007a7406adbf
SHA1

289f07b20f3ffb6b92671f72d10f5ef7e67c1e5d
SHA256

45713e7e289935e3d0d191fc21038ff187a3cb123b7bff0ce00bb65499d9c631
SHA512

7df4b3fca0a607832d4782ecf5349c3015701fbd9918a0e4dd97d2c9ec57a2f1d84984b26e3966b99ca4b3e9d0fb997db446117b40cb687a1462428d00ce82ce
SSDEEP

768:OY6xAGvMmXD/ITwANtKiDVQFQAlytfu6HUJ6j1TJCWh7CDbOPFo+V6z+oGqNtz7q:OfAWLIUANAplytWumAHCag+od72z5UXQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
742447efec98440fc5a0007a7406adbf_JaffaCakes118

Files

742447efec98440fc5a0007a7406adbf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

372cb1afc2a93c932bf474b9fcb8cb7f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LocalAlloc
LocalFree
GetProcAddress
ExitProcess
LoadLibraryA
GetModuleHandleA
VirtualFree
VirtualProtect
VirtualAlloc
GetModuleFileNameA

user32

wsprintfA
MessageBoxA

Sections

.data
Size: 56KB - Virtual size: 232KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.asprsc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ