bda1222a160eb52055068a405d565fd3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bda1222a160eb52055068a405d565fd3_JaffaCakes118
Size

340KB
MD5

bda1222a160eb52055068a405d565fd3
SHA1

6b8503e5ba9f71e52bdba2d6ce0ccc0ce39ded7b
SHA256

71110ab09e7d5cf17e2cc3cd2d0aae7a6853e55b36bc892a1e049a446ed99f54
SHA512

3020074a49a95cab7a869f48634d7e683696ab9c125c611695ef351b4e152bee15e7b7f90d24d05841a553c2cba4a36b274c6c9f0568c4dc93fdca9054c25129
SSDEEP

6144:lHzpay4/ear5fbq7oIIezUph7Osp4KbRawxpTlzy:o/r5zMoIILeKV/tVy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bda1222a160eb52055068a405d565fd3_JaffaCakes118

Files

bda1222a160eb52055068a405d565fd3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f433e7fcc51e68080022754836705744

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree

user32

MessageBoxA

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

vlp6g46f
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

jie.lbth
Size: 267KB - Virtual size: 268KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rky8uncq
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ