b8c08d43399da95894a2d92f3e2d47be_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b8c08d43399da95894a2d92f3e2d47be_JaffaCakes118
Size

564KB
MD5

b8c08d43399da95894a2d92f3e2d47be
SHA1

0af96a8566a96df1b6fe1851a46e76584b8091ee
SHA256

9a1fffd1d51220ebb97c724381984ce2537db1708d7ccf635096d3cd800386c4
SHA512

d16a8925f1f260a8b44f0f8d1ff60da1f5fc2e16b4434e10198e911108a59de5b1aae3fc12287a63285ff8214745e5a2ed66fe0ea61d6658e82779cb202eced4
SSDEEP

12288:cOUJIc1nttmoCF74H0lmeDCYidWEuUJRblqp7ZDiEyi4XjIpG1bm:XU84NSCTapTyiBpG1bm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8c08d43399da95894a2d92f3e2d47be_JaffaCakes118

Files

b8c08d43399da95894a2d92f3e2d47be_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c0ca8fb524d53a294a75f3adfde9e816

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
ExitProcess
GetModuleFileNameA

user32

MessageBoxA

Sections

.data
Size: - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 534KB - Virtual size: 534KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_rsc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ