da74493f8fad6f50e18ae78950999395_JaffaCakes118 | Triage

Sharing

General

Target

da74493f8fad6f50e18ae78950999395_JaffaCakes118
Size

24KB
MD5

da74493f8fad6f50e18ae78950999395
SHA1

85e415894ab322ebad4adc1b5fca03b8b2dcbf4f
SHA256

1905f7af8e0abd07833d26f83e85545db7d1503b30562b1de7a31ce27d617206
SHA512

5792b32854d9d01ab67ae95138438cc1cf64d9c879c45d2e4e52e1d0fdca12bcd6480b33fc860b79e11dd83d30e73ddb19f1909a6c18287072a1c5a63a423e8c
SSDEEP

384:PezFlezFH3IUIuzcgcAepKLxvQZuF2LJbEUzNvFCqShvJaodJBDjw2pjBggfKZSv:Wz6zeozFiAxvQZuGJbEkFERhw2FXfVv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
da74493f8fad6f50e18ae78950999395_JaffaCakes118

Files

da74493f8fad6f50e18ae78950999395_JaffaCakes118
.exe windows:4 windows x86 arch:x86

46b0675c1fd7681c7b19a1c83d5aff83

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
ExitProcess
LoadLibraryA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA

user32

wsprintfA
MessageBoxA

Sections

.data
Size: 17KB - Virtual size: 5.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_rsc
Size: 176B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ