d5ed98014499971a87342d88b1706129_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d5ed98014499971a87342d88b1706129_JaffaCakes118
Size

33KB
MD5

d5ed98014499971a87342d88b1706129
SHA1

c4da991e81ded0e04c71406fdcafa73ba233cc15
SHA256

ec5957fa9907ad0f8ecb666d9f99e869067f753e1105d38a75e7e3cbfa19f1ef
SHA512

4f52457179b5b1429a15fe744886ebe1e787525fbd8d2b549ff5f7ffbf5fccb205e17c6bd77960630346010b2bd1b99f166c65f94f6650a4810b2615bbbba09f
SSDEEP

768:rn2qJyKmme1qVporrHCRBIy+7wWvwM21/aO5UqfZ:r3JyFkYrEBIyQvwM2131x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5ed98014499971a87342d88b1706129_JaffaCakes118

Files

d5ed98014499971a87342d88b1706129_JaffaCakes118
.exe windows:4 windows x86 arch:x86

46b0675c1fd7681c7b19a1c83d5aff83

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
ExitProcess
LoadLibraryA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA

user32

wsprintfA
MessageBoxA

Sections

.data
Size: 26KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.asprsc
Size: 356B - Virtual size: 356B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ