85216f3992153e21e6dbfa3e8943217b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

85216f3992153e21e6dbfa3e8943217b_JaffaCakes118
Size

576KB
MD5

85216f3992153e21e6dbfa3e8943217b
SHA1

d2df9bc7c2f424f376e64d8efdcff438ab227347
SHA256

d7ec586a8cdfb69c919225923291ab78e33afe8ab0e86af48bd8b7e5b8f5e1cd
SHA512

a3f7c109138ce7de1f9e4d2bc40f404db5c531abebf39cbc6ba55c427a6b718f917d79878e1d7e7f630534e5fd4b67d7c5435b1c005f7b598f1bf415f868c5e7
SSDEEP

6144:mWJCowfCRVrA6cO9UFNVmejOROaccQvZfECq323o4vnXWEfH:pJCoaCRIy98paccQ5ECq3233fWEfH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85216f3992153e21e6dbfa3e8943217b_JaffaCakes118

Files

85216f3992153e21e6dbfa3e8943217b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

99f5b0b723d6fca2813f516623081e1c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
ExitProcess
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
FreeLibrary
GetLastError
CreateMutexA
LoadLibraryA

user32

wsprintfA
MessageBoxA

Sections

.text
Size: - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 142KB - Virtual size: 142KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 423KB - Virtual size: 423KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ