b665371eced3e97688bc175dd86896f7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b665371eced3e97688bc175dd86896f7_JaffaCakes118
Size

366KB
MD5

b665371eced3e97688bc175dd86896f7
SHA1

b5cec77e0df324ba0cfb31c702937d0044ecb24a
SHA256

61235b96f60f98e0be8e65cec7ba074fdeb7c52284b86374043287271866d857
SHA512

5c3772db20ffb767cedbb880a9bb303930da41d2042d3fbe9f9ac64346550802ce82a762ab8528aeee6da391de4aebba644c6ee62d006f2e927084adab04c1de
SSDEEP

6144:U/yw1+tN7CjvI0SVlSi+aAufSkEqlaKxjbGqsiD9gy9tA+DnW6kSiXvvCqgjekeB:+d4V0SVlSkAufVZcygktVWTSKv6FekHq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b665371eced3e97688bc175dd86896f7_JaffaCakes118

Files

b665371eced3e97688bc175dd86896f7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

46b0675c1fd7681c7b19a1c83d5aff83

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
ExitProcess
LoadLibraryA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA

user32

wsprintfA
MessageBoxA

Sections

.data
Size: 327KB - Virtual size: 832KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.asprsc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ