db9283327e633be8bf35ab5143ab4a00_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

db9283327e633be8bf35ab5143ab4a00_JaffaCakes118
Size

102KB
MD5

db9283327e633be8bf35ab5143ab4a00
SHA1

51847b7ec575d1cbdfef41542921c7199a85733b
SHA256

e1ba07145b24a1393850e69bba7660c7cdde1ce454aa0c2be4e1682201abf3ac
SHA512

16a441b63354b64fe72975bad225d5c5d8af8663ab9a13821d424c0dfa5faa98e71ef2e67ae03d15ade8656498babc1540d86462e7e3dd4ada91edab4dbe4c52
SSDEEP

1536:gxkYefAcd/FkBKuW1CeXQgiBFuxtLfiDjF9X15tjXVeLjSeco1X6r1W8i:gepU3qJXQgSFyLKDjF9XpnMtgs8i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
db9283327e633be8bf35ab5143ab4a00_JaffaCakes118

Files

db9283327e633be8bf35ab5143ab4a00_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a79c5d6f0b0b919ece6a4db2230eda4e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetProcAddress
GetModuleHandleA
ExitProcess
LoadLibraryA
GetProcessHeap
HeapAlloc
HeapFree

user32

MessageBoxA

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 86KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE