aca23ae54b5c1fe772553338341395a7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aca23ae54b5c1fe772553338341395a7_JaffaCakes118
Size

25KB
MD5

aca23ae54b5c1fe772553338341395a7
SHA1

3f2baf6ee367102f70209cf347d5b6731e84d690
SHA256

c83fac8862c54b22da5242bd723a323901411b2e3be2380ae5d51b19e242a1b0
SHA512

ff5a07a84052473a013f5b1dbc906ddd72293cb94790834cd2320af1ede98af3294837778eb361a663bd7970938a805f75f6fa0cdc1946834257ce35e13e846f
SSDEEP

384:n8Qv5axj2jDuAu2D4GIYwyDYszZx9JrTU69YIotHVev4XKJ49o8uMu:nzyV283qrrTVxodYc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aca23ae54b5c1fe772553338341395a7_JaffaCakes118

Files

aca23ae54b5c1fe772553338341395a7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c0ca8fb524d53a294a75f3adfde9e816

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
ExitProcess
GetModuleFileNameA

user32

MessageBoxA

Sections

.data
Size: - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_rsc
Size: 956B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ