a3d821fd5f8c4a7e8b81562630764e5f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a3d821fd5f8c4a7e8b81562630764e5f_JaffaCakes118
Size

60KB
MD5

a3d821fd5f8c4a7e8b81562630764e5f
SHA1

1057ebe90c848784eef3970108b56bac103a27c3
SHA256

4ee7eff5aa6857ce8cdea0771e0d029f2c879fb0d67ff428001d3bf60596780e
SHA512

652b042fa2d08b5d3ae42d768a41c79617d38919028a0e3fdafef07fc8763d951582fc7faa8511ab77f95a8fc66bae04dbea3a9ec465285fd43ac932ba25694d
SSDEEP

1536:on+LIOvz+OY0jyJu6Ha1BPTY+NJzx/LCn8PjUqAfhscpY9:onn05BbY+Z/L4zZfhscO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a3d821fd5f8c4a7e8b81562630764e5f_JaffaCakes118

Files

a3d821fd5f8c4a7e8b81562630764e5f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

58708828d5c31968bd59859804ecde67

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
GetLastError
CreateMutexA
ExitProcess
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA

user32

MessageBoxA

Sections

.data
Size: - Virtual size: 296KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 272B - Virtual size: 272B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ