b4c9fd20865206eeda2b68e2900a5d45_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4c9fd20865206eeda2b68e2900a5d45_JaffaCakes118
Size

344KB
MD5

b4c9fd20865206eeda2b68e2900a5d45
SHA1

cbb3d145f3f9b4cc4a72c2e48208c580513a05b8
SHA256

3cc5b6c07ddf62cae11013227ac3cc8886d3ef573aa559a97dc783a423e0bf63
SHA512

bfd72355dbe2c9a83bb2d491e92f4f51444ca9e5641111c1fb9b68a0dd3fdf2742876d6d03ec478bca2d6301e61d129b10f29474505eb90b27909323f480b7bb
SSDEEP

6144:PdAU03YlYz01sqdZdXqtK4V3UHRmHlpuzcBIcPQUmR1nVu9/8XkH1QHBoCPpa3j0:2U0IeqdTXqtXV3mclp9PQUOfu9/8awaI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4c9fd20865206eeda2b68e2900a5d45_JaffaCakes118

Files

b4c9fd20865206eeda2b68e2900a5d45_JaffaCakes118
.exe windows:4 windows x86 arch:x86

46b0675c1fd7681c7b19a1c83d5aff83

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
ExitProcess
LoadLibraryA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA

user32

wsprintfA
MessageBoxA

Sections

.data
Size: 331KB - Virtual size: 820KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.asprsc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ