a9cb571ac5277438da75aa0c397f4d05_JaffaCakes118 | Triage

Sharing

General

Target

a9cb571ac5277438da75aa0c397f4d05_JaffaCakes118
Size

17KB
MD5

a9cb571ac5277438da75aa0c397f4d05
SHA1

887460ae9932915d19ea8eb3dbcecc3076c770cf
SHA256

e0479a89300f55cf1f531924bbc7d9a8fe2d3616dcf4e51f1d844e090a4dabe3
SHA512

8b7379fea02a35e28b6400b8d5d3913b13b04b1dc7c99c4e151d4c359340816d2fcf057e82585a32a6f0ff5d499eef08ae118fa08de53a031eec5aad459f86c0
SSDEEP

384:ri7WBzb+brGGhNVNtNmWG3BrQT8AjNICns:rppKbrTnNmWAQnxs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a9cb571ac5277438da75aa0c397f4d05_JaffaCakes118

Files

a9cb571ac5277438da75aa0c397f4d05_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f433e7fcc51e68080022754836705744

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

4v4irn9w
Size: 21B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

tvv3qydy
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE