7452dcdbd44a000f2c3ccc74d4d4c912_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7452dcdbd44a000f2c3ccc74d4d4c912_JaffaCakes118
Size

280KB
MD5

7452dcdbd44a000f2c3ccc74d4d4c912
SHA1

7e17ddaf2290578290307949e665bf8f047a29e6
SHA256

83a29c3ef108732cf331dd1a37b3b1b5159d3a02e11a90c4f678da9b71add468
SHA512

274b77dda2ab0518452f2b1987a04644d82fc02a410b1e5dc70140563dfce59e41c5e5b37b5b63a3ffdbfa90f59a99de83fd7c10a036f9b7144d61c24ec8eef2
SSDEEP

6144:uoK/tWJT3ZFCLETTyRNTLpjQ03oKlxH/8OoyYX+joSovq4paOB:uoKFWV6LCTyRNTK0492YuSvq4UOB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7452dcdbd44a000f2c3ccc74d4d4c912_JaffaCakes118

Files

7452dcdbd44a000f2c3ccc74d4d4c912_JaffaCakes118
.exe windows:4 windows x86 arch:x86

46b0675c1fd7681c7b19a1c83d5aff83

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
ExitProcess
LoadLibraryA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA

user32

wsprintfA
MessageBoxA

Sections

.data
Size: 267KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.asprsc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ