7463fc702d4037fdff25f5ddab41eeca_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7463fc702d4037fdff25f5ddab41eeca_JaffaCakes118
Size

72KB
MD5

7463fc702d4037fdff25f5ddab41eeca
SHA1

682a1273f0f956d325c2a8425e2a7e5f8d243958
SHA256

c726e17dbd21080c9b403198f31c9854b3eb609e6337ba20b189cefbc5b4eb91
SHA512

1052dfacaeb1f9e34f8ed8c4fe57102ef91619be0271e6a363c30415b408976d7732c2dcbdc052e7d8015254ca2bc403437571e17db00a74a76cfc752b62a9c9
SSDEEP

1536:6dWb3af64gRn3DvsT1OV/KYoLzqF5XUr7Jx1pPA/OT3ECqse1A:6d4D4gR3LsT1CSLz2e75tA/Iisr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7463fc702d4037fdff25f5ddab41eeca_JaffaCakes118

Files

7463fc702d4037fdff25f5ddab41eeca_JaffaCakes118
.exe windows:4 windows x86 arch:x86

536c35e361b8b671498d1baf00bbbda5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
ExitProcess
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
GetLastError
CreateMutexA

user32

MessageBoxA

Sections

.data
Size: - Virtual size: 180KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ