b52db09f2aaf98a6afa0b9df71b3404c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b52db09f2aaf98a6afa0b9df71b3404c_JaffaCakes118
Size

2.3MB
MD5

b52db09f2aaf98a6afa0b9df71b3404c
SHA1

bd28e8a0348beb829240ccf974624780086c4ec3
SHA256

27feeefcd65c39ec974d09868028465d225c4615c79868a940a594ac87c52f57
SHA512

48c0f5312063befa480ab8d8eb755997207f87e2220ca49373e0fedc76ef2295c9e9d358384c016954e77ad2139c369f67d6d4a7596f5870105f24a3d435c978
SSDEEP

24576:rWJFbi5FpvTRdBg2ESqG/wLUWg0zPSZ1VFBkN0lLnDV6rHdsxsm00623FJHQ/OSn:rEFoprh9bqGj/dnUIsmlrFJg5oPUUk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b52db09f2aaf98a6afa0b9df71b3404c_JaffaCakes118

Files

b52db09f2aaf98a6afa0b9df71b3404c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f433e7fcc51e68080022754836705744

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 344KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

zlhweopm
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 7.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

x0bgcwxc
Size: - Virtual size: 392KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

hac9k8w7
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

xwyvo21r
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ