dbb86a04eec478f4476e9766673085cc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dbb86a04eec478f4476e9766673085cc_JaffaCakes118
Size

119KB
MD5

dbb86a04eec478f4476e9766673085cc
SHA1

ae463929178143b21ed231aa1da3b48f4fa8f05a
SHA256

731fe9d20f6bbb2b34070030abd6e6ed98a49a443f0fcfa34464a61bc24598e4
SHA512

77b75930a4bf3c2dc35c84311c1513d82c1502e2ffc0b2ec801fe06060847c541a40a802b884aedc04fcea22fd65f96969b0aabd4545f0dacab1a593c0c5fa3d
SSDEEP

1536:7FHwtyU/AWENGXq4AsfuvBTIOdGz1dU6vcr6UfJxvmuE3GmpkfyCaX1wEKpSd+8u:twty8k63KBTIOdGz46v3xr3WyrXNG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dbb86a04eec478f4476e9766673085cc_JaffaCakes118

Files

dbb86a04eec478f4476e9766673085cc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

acd9fa3a74cc4c1d92998e6ad62eeb8f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
ExitProcess
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
FreeLibrary
LoadLibraryA

user32

wsprintfA
MessageBoxA

Sections

.data
Size: - Virtual size: 5.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 50KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE