76f175b0b60fb3baf8ae8379e0f033b9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

76f175b0b60fb3baf8ae8379e0f033b9_JaffaCakes118
Size

451KB
MD5

76f175b0b60fb3baf8ae8379e0f033b9
SHA1

4478e593a6097953ca9d6d173042434075df5258
SHA256

905de6fd03d7fe3bd9a548fddfb594af7f2640d110fb913947ff77d843d5fc98
SHA512

e64b9513a8c81a7f7eac76226ad48ec6c0805bc008af0633acd18fd71858883a98e6e56bc0a1b5c44463ae51346d24d6e56a8596b21c8e051e191683bc953686
SSDEEP

12288:PCa7dFIIeGmG2JnOVIBTeoI+rgUvYIcGtTYsABojvv+4kMn5or:PjdQnYMQ+cUp9ABovX5or

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
76f175b0b60fb3baf8ae8379e0f033b9_JaffaCakes118

Files

76f175b0b60fb3baf8ae8379e0f033b9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bd227ba966c127e93fe82f25f211eaca

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
ExitProcess
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
HeapAlloc
GetProcessHeap
HeapFree

user32

wsprintfA
MessageBoxA

Sections

.data
Size: 441KB - Virtual size: 964KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_rsc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ