954bc02c2ef51f2d7181e44a1dbe2f92_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

954bc02c2ef51f2d7181e44a1dbe2f92_JaffaCakes118
Size

568KB
MD5

954bc02c2ef51f2d7181e44a1dbe2f92
SHA1

e6021fa9d021f41ce239deb048b98188325de584
SHA256

3f0c7a833680a53142a91d049ef7200eba24836040a0cf6b03ae1451ca2faab7
SHA512

e3eba1a9f96e81c4f4d383cf38cc1a65f10d7e2df53a8355f18375b327b9af3aa9a50cfe383e45caa3f469a10dc8361ec094197c571c5754763a2dd974b0f71f
SSDEEP

12288:mh+BARmZPgHNJIEoclaEjriP/aYCKTEdXAF:mAARQIHL1JXuiYIXY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
954bc02c2ef51f2d7181e44a1dbe2f92_JaffaCakes118

Files

954bc02c2ef51f2d7181e44a1dbe2f92_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f433e7fcc51e68080022754836705744

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 224KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

og16cdxs
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

49nkss6s
Size: - Virtual size: 368KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

1e14p.l3
Size: 491KB - Virtual size: 492KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

he70pseo
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ