825a2f9aaeb30ea4d8fed58754a37a28_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

825a2f9aaeb30ea4d8fed58754a37a28_JaffaCakes118
Size

330KB
MD5

825a2f9aaeb30ea4d8fed58754a37a28
SHA1

240af3d24b8c573bb77eaaa23b293c5ee99fb5c3
SHA256

e6d118dd01fc110c98463f7533f3411543fb1b00ab5dd66930f5d1c129fcb15f
SHA512

1fabe9da27974b73745fe738a0dc3787c7990ed5d8bc118f50dcc78e8864e9ae4c3daa9bb1bbad5aeb3c36af40a4436005163cc84d9b77e8965afc7afd7c2724
SSDEEP

6144:fEjJFWl2qEu/v7NVg7iAyoaiOemUUVK5Z831WLQ7z4jwz8JPt2KFjlGs:AFU2qxVMiAnac8KC1WLi4j0Y2KF5Gs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
825a2f9aaeb30ea4d8fed58754a37a28_JaffaCakes118

Files

825a2f9aaeb30ea4d8fed58754a37a28_JaffaCakes118
.exe windows:4 windows x86 arch:x86

372cb1afc2a93c932bf474b9fcb8cb7f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LocalAlloc
LocalFree
GetProcAddress
ExitProcess
LoadLibraryA
GetModuleHandleA
VirtualFree
VirtualProtect
VirtualAlloc
GetModuleFileNameA

user32

wsprintfA
MessageBoxA

Sections

.data
Size: 314KB - Virtual size: 676KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.asprsc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ