b669b51de8d139e4f40209bd3252c83d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b669b51de8d139e4f40209bd3252c83d_JaffaCakes118
Size

545KB
MD5

b669b51de8d139e4f40209bd3252c83d
SHA1

b5173c272b2c2e9fdda94b46397894e177c7b026
SHA256

3f21bb0fe184990eb274080491d0405b5546bacbe1cf1d13751e4ca3d03ee01a
SHA512

0a6f44d9eec54837b9808ba815ecdd1eb947a933107cf230ac49ad1938632482110827b0431a1b8a92d8007318187bc9f4b99d403b4f908d25204afc0c81a5bb
SSDEEP

12288:30YLvF2qFnceRnAXj975Rfz9NMslcrJn5EVRajBoa+xZ7TvIMprK9z:7LvQYnYj9/792pB5EVR/bPRprE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b669b51de8d139e4f40209bd3252c83d_JaffaCakes118

Files

b669b51de8d139e4f40209bd3252c83d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c0ca8fb524d53a294a75f3adfde9e816

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
ExitProcess
GetModuleFileNameA

user32

MessageBoxA

Sections

.data
Size: - Virtual size: 3.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 534KB - Virtual size: 534KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_rsc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ