d371fe61de6774dee383426afc5a3a73_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d371fe61de6774dee383426afc5a3a73_JaffaCakes118
Size

876KB
MD5

d371fe61de6774dee383426afc5a3a73
SHA1

7544f457eecaf359398e14c395d8511c07172054
SHA256

5690b485280dfa0640ad3f32c26c164cc3c0ea1235a12f84c01a53f2d299ef8c
SHA512

284331f73759425db8921e5d8191db1dc5262f33c0fe58856fbaa225aa87bf16cb006ecbc36a409c8384bdd92185a0522ffe36bdb62b459eb7a49d16728c2cf6
SSDEEP

24576:0sTS4zgm8KVGdztCKGNnNrT6jbgJ4ODnldkyskECa:06S4jVSzwKKNvz4wnPkiTa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d371fe61de6774dee383426afc5a3a73_JaffaCakes118

Files

d371fe61de6774dee383426afc5a3a73_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c0ca8fb524d53a294a75f3adfde9e816

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
ExitProcess
GetModuleFileNameA

user32

MessageBoxA

Sections

.data
Size: - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_rsc
Size: 288B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ