b8e22502ed8edb66ed0125d3c0d66885_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b8e22502ed8edb66ed0125d3c0d66885_JaffaCakes118
Size

63KB
MD5

b8e22502ed8edb66ed0125d3c0d66885
SHA1

660f7d44682c8f7c50de03995e386dd7f95175c4
SHA256

7c0aad0c2156e521439a12c6d1be06df454e535be3ed1317cca5f9b08f4197e3
SHA512

9f44c55afee0b12361f619e52061053be4533839079bb021ea71e1f206a856b3fd6a5bb941c9d1769f598ee314dbba942543fffbc1a3f2e25f45775c12f7b58f
SSDEEP

1536:VjdRG7mTtoskhsapAcrJw1SCowkronSaYE:ZPGaSX3Dr0SmSG3YE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8e22502ed8edb66ed0125d3c0d66885_JaffaCakes118

Files

b8e22502ed8edb66ed0125d3c0d66885_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c92746cd3b69c56e5c4ed6d3f9854fa1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
FreeLibrary
VirtualProtect
GetLastError
CreateMutexA
ExitProcess
GetProcAddress
LoadLibraryExA
GetModuleHandleA
GetModuleFileNameA
LoadLibraryA

user32

MessageBoxA
wsprintfA

Sections

.data
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ