c77e089a747f048c0e143b771a337e2b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c77e089a747f048c0e143b771a337e2b_JaffaCakes118
Size

6.2MB
MD5

c77e089a747f048c0e143b771a337e2b
SHA1

9b9db73cfc5e15bea603e4693f17cb7463409747
SHA256

28691898a490b4c720e30aeb6173be59103b106ec86b9f99bb377f14a89f339c
SHA512

92ffc3f7f99dc58cf3970c029403879ecede90bfbc3cfbee62331c8153388f89a2733c908663ef486280db8b16bfbe8c412aee2253ec34dec9446f4a8df8f871
SSDEEP

98304:a9Gw7AfYDe7EC2Yi8BoKAbRZFk5TcV3FZBzFBdItYEc5NqHa4s:a9b7x7CZVOnRZyTcV3HBZItZczqHa4s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c77e089a747f048c0e143b771a337e2b_JaffaCakes118

Files

c77e089a747f048c0e143b771a337e2b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

58708828d5c31968bd59859804ecde67

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

VirtualFree
VirtualAlloc
GetLastError
CreateMutexA
ExitProcess
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA

user32

MessageBoxA

Sections

.data
Size: - Virtual size: 69.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ