af80758ce2fd57c2d1b7fdb69ace647b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

af80758ce2fd57c2d1b7fdb69ace647b_JaffaCakes118
Size

323KB
MD5

af80758ce2fd57c2d1b7fdb69ace647b
SHA1

b0ae22467e3efe0f274897ed7240637e344ab9c7
SHA256

1b797dd6c8bef6342089e1624006fc24bf96787e7e157200e4a73c0f97e66051
SHA512

6a36b5bacd640977cb612ba3eba8b898384212eb9a03fd1c8c471265a434f693c41078c47ce4c296ad65c5d6becf93bd275ec570d0255a7488be7a75ba8b530e
SSDEEP

6144:EdAU03YlYz01sqdZdXqtK4V3UHRmHlpuzcBIcPQUmR1nVuqrghlO:7U0IeqdTXqtXV3mclp9PQUOfuqrgvO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
af80758ce2fd57c2d1b7fdb69ace647b_JaffaCakes118

Files

af80758ce2fd57c2d1b7fdb69ace647b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

46b0675c1fd7681c7b19a1c83d5aff83

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
ExitProcess
LoadLibraryA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA

user32

wsprintfA
MessageBoxA

Sections

.data
Size: 284KB - Virtual size: 776KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.asprsc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ