db9e5caca3d82237fbf358902cdfc4ca_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

db9e5caca3d82237fbf358902cdfc4ca_JaffaCakes118
Size

421KB
MD5

db9e5caca3d82237fbf358902cdfc4ca
SHA1

e467a9810a134c1b986d7fcb6ea89c45b445959f
SHA256

90b4c85069b04bd056d792d7f4bb2295dcc196466b792eb596b2ae881537e4fb
SHA512

80e4570931acdda1b98f9ffa85857edd0a2c8b530f06666f7855651b7a3bea9264e54036619797caa936459b6d8b50ba2d35f4e35baba85fb13de694b801e2b0
SSDEEP

6144:mGxnm6PjK0HJgUWwTTvP5uDQSWTdj1rPVaB6l9OENOqWCOu1q1B8vnGqmYe/XDDJ:JRrbKkJ+sTgAdRrN8HENrOu81B8HErD5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
db9e5caca3d82237fbf358902cdfc4ca_JaffaCakes118

Files

db9e5caca3d82237fbf358902cdfc4ca_JaffaCakes118
.exe windows:4 windows x86 arch:x86

99f5b0b723d6fca2813f516623081e1c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualFree
VirtualAlloc
ExitProcess
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
FreeLibrary
GetLastError
CreateMutexA
LoadLibraryA

user32

wsprintfA
MessageBoxA

Sections

.data
Size: - Virtual size: 816KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 406KB - Virtual size: 406KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ