a2bb09b6617f151d6e0d9b885ea5c498_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a2bb09b6617f151d6e0d9b885ea5c498_JaffaCakes118
Size

479KB
MD5

a2bb09b6617f151d6e0d9b885ea5c498
SHA1

936e752f96d7f4a4f455ef798fccbd496014c7c6
SHA256

f5683e063403ac95f3565ad1d7d810040b3dc18cfda10f1a68e18c0246b081e5
SHA512

4efdb019d997b8c6fb5fbda578c57a28b7c1893c248976b99cb36b7fc83fc60a590a9887e86a48482eaf4e4366efc72151be00885323a608a86b603ba06418e2
SSDEEP

12288:uf3dzNevOE95cbOPizaNP8vXMR8Ni32cs7BOfFnZEn7cz9qyijOPYVHa:i3dzNev59yCPEEP8vXo8N7V7IfhOniwm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a2bb09b6617f151d6e0d9b885ea5c498_JaffaCakes118

Files

a2bb09b6617f151d6e0d9b885ea5c498_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e1ad2f986ad7f776fd3caffde19f0d01

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
FreeLibrary
GetProcAddress
LoadLibraryA
GetLastError
HeapReAlloc
HeapFree
ExitProcess
FindNextFileA
FindFirstFileA
FindClose
GetProcessHeap
VirtualFree
VirtualAlloc
GetModuleHandleA
GetCommandLineA

user32

wsprintfA
MessageBoxA

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 522B - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 562B - Virtual size: 729B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

AD1Wt
Size: 469KB - Virtual size: 472KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Mvcal
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ