8376e9c5a0c54b89516834ab01106946_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8376e9c5a0c54b89516834ab01106946_JaffaCakes118
Size

246KB
MD5

8376e9c5a0c54b89516834ab01106946
SHA1

468368a5c7ce1c2755c372e51e44705dfa5f432d
SHA256

dc57beaca756afb50dec4bde38c566ef62c465a0d2a1a110055964a4179155c1
SHA512

6ff5f0f01ab92fd665f816feb8e95857b627bbb0fa2168f88cdbe74772a5645b3b9e1b76182ac90ea4dfcdc506cbce6e72196610b6b9d4f0c7ac285bcdd10e53
SSDEEP

6144:7CFk8I0hefI0Azu7Y9UXNLei5VP/Bfs4YgV746wddU8N:2Fk8I0gIdzl9IZhk4YgV86w3LN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8376e9c5a0c54b89516834ab01106946_JaffaCakes118

Files

8376e9c5a0c54b89516834ab01106946_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c0ca8fb524d53a294a75f3adfde9e816

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
ExitProcess
GetModuleFileNameA

user32

MessageBoxA

Sections

.data
Size: - Virtual size: 752KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 232KB - Virtual size: 232KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_rsc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ