c9850b7bd5a6989cd8ceb7722ab278e1_JaffaCakes118 | Triage

Sharing

General

Target

c9850b7bd5a6989cd8ceb7722ab278e1_JaffaCakes118
Size

170KB
MD5

c9850b7bd5a6989cd8ceb7722ab278e1
SHA1

f746ca89eb2e8d6d08a0c7895aa51ec407a8cdbf
SHA256

2d8121c01c75740b6b4a474566ec105532379f600c460377a76f1ab6a21847af
SHA512

92b845b6436d3fbc7823de885ffff89a47565a5b9f726bdb3c67e65ad3650f78c0db1b0dd2183f2c5b9a8b9f659bc71040aa58ea98ad26ec968a0e0b59951c42
SSDEEP

3072:vpTTcyqvDUIE0VnJ3fUe6D5ZFL/mqsHMFPKFsjgXrnu9LOKNEzXlRQMCI:RTTcRvDVVme6knHqUI8nuxNEzXln

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c9850b7bd5a6989cd8ceb7722ab278e1_JaffaCakes118

Files

c9850b7bd5a6989cd8ceb7722ab278e1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f433e7fcc51e68080022754836705744

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

3rq0b91t
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

syoi9eri
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

hvg7bjs.
Size: - Virtual size: 172KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

v8v4c7z9
Size: 168KB - Virtual size: 172KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

qhlflsyg
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ