8c55d37813386065a7ad8ae23b5e44c1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8c55d37813386065a7ad8ae23b5e44c1_JaffaCakes118
Size

280KB
MD5

8c55d37813386065a7ad8ae23b5e44c1
SHA1

bc0ad88e201fa25fc5ddbdb8cf71f5635179555a
SHA256

e41ed82df860a8987fd7850eb5c94e38bffbe6fa0b4313d0f13cd720ef8559f2
SHA512

dba5f0959e55eebd23f926a3ac1f4bc90ee7dec16d630abb231d698d702e1a01f4529d836a356fd2bf54628d72b538f4314eb9ba7a967f766a678c1daeffaa69
SSDEEP

6144:7ZRVdsxIDU/hocGQQEQmhPktUMRXGy8hfmx49uBZjyum60RLgINcfFi60Gu50X2i:IvHGQQ7mVkttxGy8VmuAB9QnCE6IGK/s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8c55d37813386065a7ad8ae23b5e44c1_JaffaCakes118

Files

8c55d37813386065a7ad8ae23b5e44c1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bd227ba966c127e93fe82f25f211eaca

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
ExitProcess
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
HeapAlloc
GetProcessHeap
HeapFree

user32

wsprintfA
MessageBoxA

Sections

.data
Size: 262KB - Virtual size: 776KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_rsc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

ftgh
Size: 196B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE