d38a9197734f9f2ea633872f1014d4c1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d38a9197734f9f2ea633872f1014d4c1_JaffaCakes118
Size

441KB
MD5

d38a9197734f9f2ea633872f1014d4c1
SHA1

4945bea7aa14266cf1d4e089517b429e1478252c
SHA256

43e04bde24803860b6feac546f3e46ad06b1b9a7a109679892570f9fcee35fe8
SHA512

b05ff6794c17352a0a12ed6f1f8c4aefc2b0a894769d26317ee57748745c258dd2ca882ae2ea29f1d8615816fbe724afdfb4f650a7c873b12511f82999299987
SSDEEP

12288:h1VZuB+Z7TQx2TMPAwY7WwVnP+yo3SkBwtH:lZZFTaYnVn2yo3SNt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d38a9197734f9f2ea633872f1014d4c1_JaffaCakes118

Files

d38a9197734f9f2ea633872f1014d4c1_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f433e7fcc51e68080022754836705744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree

user32

MessageBoxA

Sections

.text
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

hjwsnw7v
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

y1igc1yh
Size: 263KB - Virtual size: 264KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

m5d2igqs
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ