d09fd10963ba6db828dc47d891b81d11_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d09fd10963ba6db828dc47d891b81d11_JaffaCakes118
Size

50KB
MD5

d09fd10963ba6db828dc47d891b81d11
SHA1

af4095e5c0e1db10cd8905927ca03b844bb613f3
SHA256

1b1b842ab4796a4b51167ee1b136820abd0268c4057b8dbb15b82951d3e52a53
SHA512

2c841bb08da0c8cfe9cb34e957138458a0d88f38eec0f15cd5fe69bc893d903d0ee64d030ee1218f1d2ada565e8619a53e7bd90242b4257cee77484ab869dc1c
SSDEEP

1536:PPJA22P3act2HJXGGrS/iWDDpq8OGVS7vL3:iBitHJ2G+/iW30xGuvL3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d09fd10963ba6db828dc47d891b81d11_JaffaCakes118

Files

d09fd10963ba6db828dc47d891b81d11_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f433e7fcc51e68080022754836705744

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 384KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

xcilc06z
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

4aulkt1p
Size: 73KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

mg0pzeua
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ