af86320182333c9376145dfc1e05c4d2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

af86320182333c9376145dfc1e05c4d2_JaffaCakes118
Size

214KB
MD5

af86320182333c9376145dfc1e05c4d2
SHA1

324fa64b4db8eae2c330feef5c28f6f3563e24ca
SHA256

9e2a5160ddebd1e82e21678374f836fe04efb5ea9c85ffad8b1b164011a72c30
SHA512

429171dba251e33b0fdceedb99a30f14d7207730515bf3e3b23faea1a992721ebb52ed571cbd011e222a1d1314f363daf759dd7bfbc48c1b5aa94013e21fe8a0
SSDEEP

6144:AAH51t7FzgQOuKouMYcaPi6gZhgXuBJj6nV6:Ayt7FzvmoutfTBu7j6n8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
af86320182333c9376145dfc1e05c4d2_JaffaCakes118

Files

af86320182333c9376145dfc1e05c4d2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

372cb1afc2a93c932bf474b9fcb8cb7f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LocalAlloc
LocalFree
GetProcAddress
ExitProcess
LoadLibraryA
GetModuleHandleA
VirtualFree
VirtualProtect
VirtualAlloc
GetModuleFileNameA

user32

wsprintfA
MessageBoxA

Sections

.data
Size: 203KB - Virtual size: 624KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.asprsc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ