75a0cfdbbed561198c6d1acab80b8662_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

75a0cfdbbed561198c6d1acab80b8662_JaffaCakes118
Size

36KB
MD5

75a0cfdbbed561198c6d1acab80b8662
SHA1

26b146870e8318c37efb08249438eac240fa7fd9
SHA256

db0cbd8fe80e5b0e276748e0dec89a48ad3a82843092dbc180bd5c45ab3fba67
SHA512

52898eb7d3c9d2f0478444174ba729519c7d1e8e30764c134fc9b6b9711c814ee870ff1a129f54d61526cc572fe3d9f3eea69cc02d8408107438d716e333e47f
SSDEEP

384:m8xsHpSr1geKA7OFACpsyxPUNhzkmTEjkuyl9FGmU8kpV+wgApJvFOGOq5WP:FxkA7Ojm9hzhuQjGmU+u/6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
75a0cfdbbed561198c6d1acab80b8662_JaffaCakes118

Files

75a0cfdbbed561198c6d1acab80b8662_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a79c5d6f0b0b919ece6a4db2230eda4e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetProcAddress
GetModuleHandleA
ExitProcess
LoadLibraryA
GetProcessHeap
HeapAlloc
HeapFree

user32

MessageBoxA

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE