d989af31a2caf1e89b8c661e996d45ad_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d989af31a2caf1e89b8c661e996d45ad_JaffaCakes118
Size

174KB
MD5

d989af31a2caf1e89b8c661e996d45ad
SHA1

e403cd2bffc5728d881b043b9d7e9718c8438734
SHA256

fc9014a1436701cb6f24bda7781c3d4f6e531cf6bf11706e995cdec2c3e8b099
SHA512

f851fad5e9e2c0c5d955bb6b731787b4a4bc7a33fa50bf8b68ef1823dab3a489ba1ccce844034f9b69f7fec094ab082e4caebfb26547d4d6a2c5fae2d0dcc4b2
SSDEEP

3072:W2nj/eZySFD5idgH/fTbOeFes7zMt4HqsP/K59O4wK+g6ktT2pFYUk9/E7zXES3a:W2nj/pSZ0d+TbOK7g2l/WO4wKx6kR2Yx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d989af31a2caf1e89b8c661e996d45ad_JaffaCakes118

Files

d989af31a2caf1e89b8c661e996d45ad_JaffaCakes118
.exe windows:4 windows x86 arch:x86

536c35e361b8b671498d1baf00bbbda5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
ExitProcess
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
GetLastError
CreateMutexA

user32

MessageBoxA

Sections

.data
Size: - Virtual size: 744KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 167KB - Virtual size: 167KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 444B - Virtual size: 444B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ