b331587a354178f8973c5db1277bac0f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b331587a354178f8973c5db1277bac0f_JaffaCakes118
Size

267KB
MD5

b331587a354178f8973c5db1277bac0f
SHA1

0d65baacde9838dc7f6be112aa12b7b676f50fec
SHA256

ef3869afcdb9454ddd4513116192eae5cbaeba80c183f793884b96090c04ec69
SHA512

4d20944f4fac3c6004223b6b7f195e002ba0398acdd3e6846ccbd8a55e1c267495022295c2ebfbb09152707f426cf75c5ce68e82a6dc7c7034ad66ae79838963
SSDEEP

6144:j3qMjW/B6LMitnXPyBZiGedpZzu+Zn8fBFyUi+l:jqS+bIyyGedzzu+Z85FyUNl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b331587a354178f8973c5db1277bac0f_JaffaCakes118

Files

b331587a354178f8973c5db1277bac0f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f433e7fcc51e68080022754836705744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

pq.3bm7l
Size: - Virtual size: 216KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

7a6cypgd
Size: 258KB - Virtual size: 260KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

pz8a.fv.
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ