8bb46a3a69cdc2db96b9ae723d2fd8b4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8bb46a3a69cdc2db96b9ae723d2fd8b4_JaffaCakes118
Size

613KB
MD5

8bb46a3a69cdc2db96b9ae723d2fd8b4
SHA1

c26f4788e563600519687eeb8a659942a0a2722f
SHA256

79b4480dc4ff572e853e3f0766a675f69ff6cfb86fd193a87146149c8159c6cc
SHA512

827de038c2f175af1147badb35757049c395efd99445b90fed4602df1e2d28746445198bbd95cf6fc0aab120164ef8a26f50dbbde9fcc06dac407eb27f3257ef
SSDEEP

12288:HnbfsmhHjlRehRpDad1NTt9aAdNkp6ihsqMb6VtYnNE3dIzrXHHpS9Mfjs8pz:HnTssDlo3p4VzFdU6i+qe6wNE3dIzLHZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8bb46a3a69cdc2db96b9ae723d2fd8b4_JaffaCakes118

Files

8bb46a3a69cdc2db96b9ae723d2fd8b4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6e1f282449492d5fc7a87e6f1c3ced5d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LocalAlloc
LocalFree
GetProcAddress
ExitProcess
LoadLibraryExA
GetModuleHandleA
VirtualFree
VirtualProtect
GetModuleFileNameA
VirtualAlloc

user32

wsprintfA
MessageBoxA

Sections

.data
Size: 600KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 5KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_rsc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ