b68d45df2f3f707fdaf9b9e52bc37110_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b68d45df2f3f707fdaf9b9e52bc37110_JaffaCakes118
Size

312KB
MD5

b68d45df2f3f707fdaf9b9e52bc37110
SHA1

2a78904cce052148e8b84bee157d3f9104a5c234
SHA256

7f1dc0a7f66c81a5c2b99ec7f7f398b0bbf628f471ec952162815d349011b4fd
SHA512

3eb1e22267de60043914ce699e90964739b9f092bf9177e3116c247a9b652a66676ee24c091edb3faff6488d7b47d41a98f032836c9e4851f002548e8824d4b3
SSDEEP

6144:Ne210izhfEgnBGKNr0ridbe/majSU4x+1S1QXLFrJ5HmYGGGg7:Ne21fzhMgnz43Xj2zSXJnV1V7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b68d45df2f3f707fdaf9b9e52bc37110_JaffaCakes118

Files

b68d45df2f3f707fdaf9b9e52bc37110_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f433e7fcc51e68080022754836705744

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

agjkk9hc
Size: - Virtual size: 276KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

xkswfy0i
Size: 302KB - Virtual size: 304KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

oom0gjw.
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ