a93783fce181c7b2e054aaffabe2cbd0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a93783fce181c7b2e054aaffabe2cbd0_JaffaCakes118
Size

127KB
MD5

a93783fce181c7b2e054aaffabe2cbd0
SHA1

b5b4926c6ad6483d0733ddea943f07edab215b58
SHA256

f54fdf3fdb7a11965f090d7c5afac461e6c47abf9b36d791e6d4254ad1397928
SHA512

dd2ea237e98717fda337fb77acd5bb13a0467838c15116befd793c41f15de4be0095ad16be59d30ecff6b928527f60e5a22db9291685a59a1204d41ea4689e56
SSDEEP

3072:/f/6YH/P4u6+TaHLhqFHWfDhQKoNIK8oKDpqZI:/f/z/PXDTb2UWDpq6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a93783fce181c7b2e054aaffabe2cbd0_JaffaCakes118

Files

a93783fce181c7b2e054aaffabe2cbd0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e1ad2f986ad7f776fd3caffde19f0d01

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
FreeLibrary
GetProcAddress
LoadLibraryA
GetLastError
HeapReAlloc
HeapFree
ExitProcess
FindNextFileA
FindFirstFileA
FindClose
GetProcessHeap
VirtualFree
VirtualAlloc
GetModuleHandleA
GetCommandLineA

user32

wsprintfA
MessageBoxA

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 522B - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 562B - Virtual size: 729B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

vUhc9
Size: 105KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

NpePv
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ