bd5fe1919c42b3e72f8594481a5b755a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bd5fe1919c42b3e72f8594481a5b755a_JaffaCakes118
Size

149KB
MD5

bd5fe1919c42b3e72f8594481a5b755a
SHA1

7a46049a1d7daed343a5c1163ed7d81e59a1d1f1
SHA256

22ce5a35b41f4748e9b3821c07aa717b42cecfe34ad70fb333bce84deb156a48
SHA512

a6fc4324789393fa2f41421f4fcc692199ac8f0f18af3aa0c46da0f6ce2d852838b7a3a96b07f6f7e23c999d1e437a8b1e9e9fb6ebb37b7d394250618789a796
SSDEEP

3072:2mVZ3bRZW2+dzaw0sMJttlUyFlIlx7VrY/q/HYfALQCkAo:7RDWB5A80IlNt0q/4f/l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bd5fe1919c42b3e72f8594481a5b755a_JaffaCakes118

Files

bd5fe1919c42b3e72f8594481a5b755a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

58708828d5c31968bd59859804ecde67

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
GetLastError
CreateMutexA
ExitProcess
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA

user32

MessageBoxA

Sections

.data
Size: - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ