b9834916ca22cb6759cb9eac2c0f144f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9834916ca22cb6759cb9eac2c0f144f_JaffaCakes118
Size

44KB
MD5

b9834916ca22cb6759cb9eac2c0f144f
SHA1

55eea7c9ff3d415683405fa5b534929084090cd1
SHA256

b310f4811c59d94f47e3885c4bace844a4a71beef9f987285a47ad0b79b470cd
SHA512

1b8e099fa89f6d8320df3364a00ebe501f9c50f658d52a236ca35d64e50af3c65f91d8094d76bbccb0710d17a364683ae1701af61d2e3087cd7d50a4f00839e7
SSDEEP

768:9CA+3+k0sYjKIC9rjTlV4weOvXKz897j+WMaKeen9hP/XnqIEm:9/FRErVqoxY9h/afm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9834916ca22cb6759cb9eac2c0f144f_JaffaCakes118

Files

b9834916ca22cb6759cb9eac2c0f144f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f433e7fcc51e68080022754836705744

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

fd8efkqo
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

nq5ptsik
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

a5i.ez7e
Size: - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

8jpe5tjm
Size: 42KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

3x3mrxkt
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ