77aecd114c8fc07cce987f888fd4903d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

77aecd114c8fc07cce987f888fd4903d_JaffaCakes118
Size

739KB
MD5

77aecd114c8fc07cce987f888fd4903d
SHA1

aad8a99d721d9794bda7136de4f1d9caaf3f4b88
SHA256

db9eb5e494eb849e8fca3dffad1d75bb1116a9dc989958e4370dea7e1c0e90df
SHA512

95bd96d4a61932887657b89f1e28ad780508d1b193839898ebcd3857fe0191a7a4968a81179327521748c05738107112343ed96ef219378bc5bff558c24818e5
SSDEEP

12288:Ff/hcSd1iVM8GClUlI5EJA2eo4dtDlrGP7jh+EUJko16ajIA:x/vLiVMAUlI5EJdv4dtDagHDhP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
77aecd114c8fc07cce987f888fd4903d_JaffaCakes118

Files

77aecd114c8fc07cce987f888fd4903d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

54656479cd00795008afa08192b0ea07

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32 user32

GetCurrentThreadId

user32

MessageBoxA

Sections

CODE
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

SE
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

SE
Size: 666KB - Virtual size: 668KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

SE
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ