be721875f2404ad60c296ee526f824d2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

be721875f2404ad60c296ee526f824d2_JaffaCakes118
Size

585KB
MD5

be721875f2404ad60c296ee526f824d2
SHA1

f222dce56e7828f2fe5a8609b887592312d2a726
SHA256

41238ed7d25907f7fc940d42d6f2ded5ae717b47d9861aac23177f8ad94ec5a4
SHA512

e4e9cb8ccd04bac4919b416fa909d686502f50cedf0412bc4fc89438d3c995bbc108187ddcee8535bfe1f7e6f35d55af4d930a72f0326da50d2ad2d009cdc40e
SSDEEP

12288:e/h4qZYzGqryxoISyGiVzdBQLLqaGnogk0RJOxTX+42O:e/h47GiI/G+zdBmqa2MDXi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be721875f2404ad60c296ee526f824d2_JaffaCakes118

Files

be721875f2404ad60c296ee526f824d2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6e1f282449492d5fc7a87e6f1c3ced5d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LocalAlloc
LocalFree
GetProcAddress
ExitProcess
LoadLibraryExA
GetModuleHandleA
VirtualFree
VirtualProtect
GetModuleFileNameA
VirtualAlloc

user32

wsprintfA
MessageBoxA

Sections

.data
Size: 538KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 5KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_rsc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ