d9ca01c4c6682167333cf146661b603f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d9ca01c4c6682167333cf146661b603f_JaffaCakes118
Size

8.7MB
MD5

d9ca01c4c6682167333cf146661b603f
SHA1

f73207cb7edb26aa03e82bb7930b68bfcbe557dd
SHA256

87fbc049f597151e4ed9161fe8ba8222a496484e3afcd823455d21a27a8a0448
SHA512

c2896a598d2a8b9107902abf99af7ad16f7cb05c55388025f76389a5f21db28e8eab2ff0176686e7ec45ee595eac8d237c566e5300b70f20f6aaf4c1f36e9a12
SSDEEP

98304:6gkd7UCe1h2kSswev6P92Cwvp6JlTgv76GIWP48VzZX:fkd8SsH61Mvp4sz/VF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d9ca01c4c6682167333cf146661b603f_JaffaCakes118

Files

d9ca01c4c6682167333cf146661b603f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f433e7fcc51e68080022754836705744

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree

user32

MessageBoxA

Sections

.text
Size: 348KB - Virtual size: 348KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

c32a0va3
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 16KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7.8MB - Virtual size: 7.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

9f6zqb9e
Size: 519KB - Virtual size: 520KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

0dtt0tli
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ