d7168c13688817f2b05b560e41e2a829_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d7168c13688817f2b05b560e41e2a829_JaffaCakes118
Size

2.3MB
MD5

d7168c13688817f2b05b560e41e2a829
SHA1

fdedeba2a97519ac34de9050e0942043b6507ea8
SHA256

01167c9b00500a3ddb6a61d4955a8b15eb0cb81f48ee02d2ed5f400d9ecf9fc4
SHA512

34c25b996bf33ec3e3528963b60c96172d4b596722b69e2c0929426f06723db88a0facd778d9ce8859ecc4c2a58324a966ecc3367fedc942c5d2fd85e6619311
SSDEEP

24576:Zl4iDrO/32p8ANwKp/cCBy8UWg0zP5qmn/yHRRP1siqHdism00623FJHQ/OSq216:ZCswAHBB2HbP1ZJsmlrFJg5oPUUP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d7168c13688817f2b05b560e41e2a829_JaffaCakes118

Files

d7168c13688817f2b05b560e41e2a829_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f433e7fcc51e68080022754836705744

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 344KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

tu5jgjg7
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 7.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ybjqhfnp
Size: - Virtual size: 396KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

hbvptbt6
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

81586chf
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ