d47b620910837196249d2e703ef83a95_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d47b620910837196249d2e703ef83a95_JaffaCakes118
Size

9.0MB
MD5

d47b620910837196249d2e703ef83a95
SHA1

51f04fd8aefa15ef00b6b74d4d7e425da549974c
SHA256

4e922c0a0a70f18f49557a95c07d01bc333bc58acf07b9e2bb18421a3027d3f4
SHA512

013a6312288dda2f505c5f1f525bdc0e9006d82c54938e636764c0ae33678296571397ac2ea179debcd97a969403df45ac632ac861140845c70c94ce95053cd3
SSDEEP

98304:cA1v6CCtUFhmY5xIXmt1zwJOq/cp6JlTgv76Duk68Mbo:b1v6CCEgYEMyOq/cp4sJ8b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d47b620910837196249d2e703ef83a95_JaffaCakes118

Files

d47b620910837196249d2e703ef83a95_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f433e7fcc51e68080022754836705744

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree

user32

MessageBoxA

Sections

.text
Size: 348KB - Virtual size: 348KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

g94uo4ge
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 16KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8.0MB - Virtual size: 8.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

7u11c0hu
Size: 546KB - Virtual size: 548KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

j9.ntbin
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ