742497ae9d5e1520992087c33780db73_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

742497ae9d5e1520992087c33780db73_JaffaCakes118
Size

1010KB
MD5

742497ae9d5e1520992087c33780db73
SHA1

12fc013f74aab3dea01c4fd69c0073b9ad9ba498
SHA256

8726603c4129c82362279bd0b5baf222f69ee64da7b6d612d2de96c436e2a4e1
SHA512

cfc3dbf5b6ba7576653fb4ff62ad5f06ba3df818ce27aa1d1daa79d533f1dbd4bb892b199e0b9a2ed5136f591100f9e4d9f70959f71c2517f2054c7c85a83c1c
SSDEEP

24576:pCtg8xUfKf1EAGWfU+aLC6cG22nMl4ceCeqBXoUPX:98xUfKf1EAGj9BcG2oMlGCeq9ZP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
742497ae9d5e1520992087c33780db73_JaffaCakes118

Files

742497ae9d5e1520992087c33780db73_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c44341987641161a72221e440df4b1f7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress
GlobalAlloc
GlobalFree
ExitProcess

user32

MessageBoxA

gdi32

GetStockObject

Sections

.text
Size: 96KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

stxt774
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

stxt371
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE