a956891ea557c2bc0bba77aa042126e5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a956891ea557c2bc0bba77aa042126e5_JaffaCakes118
Size

372KB
MD5

a956891ea557c2bc0bba77aa042126e5
SHA1

db7d3467fb8ff86b14fce798eb828cb5a7a1a716
SHA256

a56b87e56d78a627915bf5ad485e84240faa9c7e492eeea97e50ca9084bd361d
SHA512

2311c7f9b93b1d2595669c62bc47376af0b8491edd2b9ba6379967be11c62196b84ae624d162c4468bcf6582f3b45c0d84a78ffa4312537a966ed2d30213915e
SSDEEP

6144:UYTB40szp5HTY7vN/E71HhQ5Q0bv9KW6xaqSJPI5zaGsA7hvztIoFKI6PFxMxpqx:UYTB40st5HoN/E71HhQVbv9KW6xVSCVi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a956891ea557c2bc0bba77aa042126e5_JaffaCakes118

Files

a956891ea557c2bc0bba77aa042126e5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

58708828d5c31968bd59859804ecde67

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

VirtualFree
VirtualAlloc
GetLastError
CreateMutexA
ExitProcess
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA

user32

MessageBoxA

Sections

.data
Size: - Virtual size: 212KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 87KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ