d673c3af06b718d92b2b03d4df8765d2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d673c3af06b718d92b2b03d4df8765d2_JaffaCakes118
Size

16KB
MD5

d673c3af06b718d92b2b03d4df8765d2
SHA1

355bd53273b60f11d27040340c994814b8beceaa
SHA256

9cd145e380eb6a93c20653a93cb4cace8c0e70b026d9758dfd8e05d59fe0dcee
SHA512

395cebf54e14186ff6506932d03a37a4c658c1d53aeeb62ceaf1ce499410ca5f3909915f57c117bd96f87595d4f292e8fb61c11efc20434be258a7c894a61507
SSDEEP

384:qIpj1ty03sH7VWUnp9p3bGTRzybUBcDTdrgfK:qIBvyTHhWO9p3b8pBATKf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d673c3af06b718d92b2b03d4df8765d2_JaffaCakes118

Files

d673c3af06b718d92b2b03d4df8765d2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bd227ba966c127e93fe82f25f211eaca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
ExitProcess
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
HeapAlloc
GetProcessHeap
HeapFree

user32

wsprintfA
MessageBoxA

Sections

.data
Size: 9KB - Virtual size: 276KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE