9428b75579713eed3c1b4674cc45f76c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9428b75579713eed3c1b4674cc45f76c_JaffaCakes118
Size

601KB
MD5

9428b75579713eed3c1b4674cc45f76c
SHA1

ce84d80bbf7a8c4e0ded4335af02360a40ea1bc4
SHA256

99d95d512f21125e787a4f8ee9b4a15070dd4dbdce71a62e9d5e65005fca8931
SHA512

83dab096212db6f4f32cc8724eec17f34fecb620bd705c21576f931add66e38fe120621cea1d88cb3d1356b1ae2b8093684cda3c5704698f3a5e43f51f82aed4
SSDEEP

12288:38M/rIwF6CKc9rq6q7Ln4rtKEs7jCri9+HxKJEnW1brNqlE2Fc:38uI1c9elLD78isHxK9xv2Fc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9428b75579713eed3c1b4674cc45f76c_JaffaCakes118

Files

9428b75579713eed3c1b4674cc45f76c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bd227ba966c127e93fe82f25f211eaca

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
ExitProcess
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
HeapAlloc
GetProcessHeap
HeapFree

user32

wsprintfA
MessageBoxA

Sections

.data
Size: 294KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_rsc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ