bca9bd11101fea8a969775c09c943fbe_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bca9bd11101fea8a969775c09c943fbe_JaffaCakes118
Size

163KB
MD5

bca9bd11101fea8a969775c09c943fbe
SHA1

7432ec495d6c2f9773fd929828c623eedec86433
SHA256

d71688479f9b317d42273130151e3fe51581e4a3bd4d82a510014bf334ad082f
SHA512

6063237425c51784cb06ae2e8b96c297b1e4456d30df26fa67eef2bf906e2d86f62920c8a1d3f9357ac666e3c6d188650bd7101d8d40b14a437af4b384cfbcd6
SSDEEP

3072:cx6PGT25hLxKBah52oTXZET1buBxzab0hFwfK8M5wSO4MA4Ps222R4s32A6:cxsGKlxqojZETlUzaohFF8M5XlRSsj2w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bca9bd11101fea8a969775c09c943fbe_JaffaCakes118

Files

bca9bd11101fea8a969775c09c943fbe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f433e7fcc51e68080022754836705744

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

xl2kry6w
Size: - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

b6wd0rey
Size: 150KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

qy1bn62u
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ