851c4eb3af931286cc2a2d215c9b4aab_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

851c4eb3af931286cc2a2d215c9b4aab_JaffaCakes118
Size

320KB
MD5

851c4eb3af931286cc2a2d215c9b4aab
SHA1

8abc919fb05233e3040feac081f0115cbacf561b
SHA256

10634c6da5adccf4fe80a61c0bddf84d4016b8dee3c00041218a13b223f803a5
SHA512

f9082544b1417cfade09bb2e030f9e1f8ee8a8489aec707d2963e4da745577b7111a6b30fc1f174ea5ca560313295d8be479a8f9d04a5f37ccce56ac3677c18c
SSDEEP

6144:UftWM1v56QpSvoZbT8eaVm1pAYn1Mm+KxShNJMR3sdn6RPsYh+QhNTwDrvsjg:U8M1vMQ4Ifao1mWuFK8PJI3sysYhd383

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
851c4eb3af931286cc2a2d215c9b4aab_JaffaCakes118

Files

851c4eb3af931286cc2a2d215c9b4aab_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bd227ba966c127e93fe82f25f211eaca

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
ExitProcess
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
HeapAlloc
GetProcessHeap
HeapFree

user32

wsprintfA
MessageBoxA

Sections

.data
Size: 306KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_rsc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ