a2b41b84b6b8f063482a65a9f4633abd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a2b41b84b6b8f063482a65a9f4633abd_JaffaCakes118
Size

333KB
MD5

a2b41b84b6b8f063482a65a9f4633abd
SHA1

c464d094b83d956d77beaa3e8dac86d1fa00fbf6
SHA256

0e36ac3a617911dac08ea714168dfa63ddb737c283344f3fa3517d9189daf0cc
SHA512

ebe82f91a0529c9ab7840e186a321d441fde44d47034a9dfd8191be5f87d65c1f78818ce66028f79db97498778f24d2cf38550fe8d7bb0b4e48e93f13122ff06
SSDEEP

6144:su7P2IXYVm1I5hh4MtOiJA0jtSXb2MgX0gSFfHSP87nEWrqiJp/:1z2IoY1I5D4ixWmyyBSFfy0br/j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a2b41b84b6b8f063482a65a9f4633abd_JaffaCakes118

Files

a2b41b84b6b8f063482a65a9f4633abd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

46b0675c1fd7681c7b19a1c83d5aff83

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
ExitProcess
LoadLibraryA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA

user32

wsprintfA
MessageBoxA

Sections

.data
Size: 293KB - Virtual size: 796KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.asprsc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

DDD
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE