b0a4629acc7e75b4e9d0dbdb402f8920_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b0a4629acc7e75b4e9d0dbdb402f8920_JaffaCakes118
Size

600KB
MD5

b0a4629acc7e75b4e9d0dbdb402f8920
SHA1

ee7130b444905e4d3ab7137fd019e53d90c25eee
SHA256

e0b099a9595fc36891e58c8541d3c423b312a2ccf9182abf7085cef6c4a757de
SHA512

c475c90be7c43cbcaa9b65ab9a586f00cdfc62b9d3f20d16b67c2132bddf400224131e8cc9a487a72caac2a237a04bafb25fdf9fbafbe96a5a14612397c9b327
SSDEEP

12288:vCc+xvzqPvWOsg9e7GSUMipYzDC5IZ8O6GFVFygGFJHZnFS3ZVK+zAm6oGda2XAc:vyvzqXmg9SGfCAImNYVFytFJHZ8Tj6oW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b0a4629acc7e75b4e9d0dbdb402f8920_JaffaCakes118

Files

b0a4629acc7e75b4e9d0dbdb402f8920_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fa225e54b763276d6b0fd2dfe65f8a7a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadModule
GetProcAddress

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 542KB - Virtual size: 542KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 35KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ