a2c8fb6c43a505dcc16b9f8f97743aae_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a2c8fb6c43a505dcc16b9f8f97743aae_JaffaCakes118
Size

523KB
MD5

a2c8fb6c43a505dcc16b9f8f97743aae
SHA1

f235fba6d15559cec4fc1dc63151c5b9cd7a728a
SHA256

553206ea15233f6a3c1b1a67b81d6b295cdecec18db39921517feb329ffc2d33
SHA512

f3132f276fe28784e6dcf8c20d94b1595a733c9fb3f4077b11208a66092fca6f65c075ed3e589d0cec6e742124cb2b08f043b6e20c6e1d05f9887fdb5cb4147d
SSDEEP

12288:ibNwnnyp0H4NVXRG7uhyb+2W8DDYgThKjAi1Lb0w:ibNwnyuH4nhxv2WGZMtJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a2c8fb6c43a505dcc16b9f8f97743aae_JaffaCakes118

Files

a2c8fb6c43a505dcc16b9f8f97743aae_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f433e7fcc51e68080022754836705744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree

user32

MessageBoxA

Sections

.text
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

cqd1inv2
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

336pk5e5
Size: 337KB - Virtual size: 340KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

0nhta1ep
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ