8aa59d9edb966abe6beaaaa0fcf5d4d6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8aa59d9edb966abe6beaaaa0fcf5d4d6_JaffaCakes118
Size

3.1MB
MD5

8aa59d9edb966abe6beaaaa0fcf5d4d6
SHA1

fb22ee692945b49d0ce849e4be580ed0a65ce0fd
SHA256

931027dc0f1e0d75f543c6cb497cda20fce5571112e73ff553c72430fa0c0091
SHA512

cda58392a1b8823f4fb8aa3d41d89adb6d243fb3f4aedfd5d5e7da7c38190abfe75fa7a516ce11a2ad4e7ddf647523e797100d5d6e97477a57626db665c0b3b2
SSDEEP

49152:kTPdA4RmJcb3k+SrzW1S5qhCO2oT9HvjhYm/Bugu8FEL:eVA2Tbk+Srz1qkOrpH7hVJbS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8aa59d9edb966abe6beaaaa0fcf5d4d6_JaffaCakes118

Files

8aa59d9edb966abe6beaaaa0fcf5d4d6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f433e7fcc51e68080022754836705744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree

user32

MessageBoxA

Sections

.text
Size: 548KB - Virtual size: 548KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

mib3zj9c
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 80KB - Virtual size: 316KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

z28jw5o3
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

kii5kp2s
Size: 190KB - Virtual size: 192KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

gl91.ewx
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ