76bfd68d5fbd7e8e894c44f28f95800b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

76bfd68d5fbd7e8e894c44f28f95800b_JaffaCakes118
Size

125KB
MD5

76bfd68d5fbd7e8e894c44f28f95800b
SHA1

8fc238f0a8b9046f05c5910b0a7351387a7d75d6
SHA256

7a701b3f44916bd996f0cc4f271cf0a8fb9b960967fa2bb4c571709a011af08b
SHA512

1673e4242e72f9e35c860691f9d374f762f3f3b9caf01405434e412221c90d7976c5026becf4edf7eb53d14adde5c5e49b236c2f6f7ae6c576638ae8c7c40c7d
SSDEEP

3072:IpaL8hRo8tWXkvwxLZl5d+Cp2ZwsjrgHXPSaiiyorU5/TY:78hR4Lnl5d+dwsjUqaz4/TY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
76bfd68d5fbd7e8e894c44f28f95800b_JaffaCakes118

Files

76bfd68d5fbd7e8e894c44f28f95800b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f433e7fcc51e68080022754836705744

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 384KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

8srcgwar
Size: - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

t6i75aws
Size: 123KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

0fclsar9
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ