dcd6e5e24bf30629874720ea8892daeb_JaffaCakes118 | Triage

Sharing

General

Target

dcd6e5e24bf30629874720ea8892daeb_JaffaCakes118
Size

92KB
MD5

dcd6e5e24bf30629874720ea8892daeb
SHA1

bee5d82d3800063242ee53c4275cfb5f932450d2
SHA256

74f336f0d3df78ee25b90e38aa098baad2255ee01870898b390fbf9dc8e89170
SHA512

2298d033fa78e9ad60463a7ee964da4efe6a17450fedbaf623e4599c2a1374fff387f04d8ba09967ae80511a7656c40df21e688e38fdcc4c87c8eaf8cc47e5a5
SSDEEP

1536:c6+ACttU/R8n0nwGGHDsCA7CESNWxci0IbGlPtMb43+ei6GXq:c6+5e/R8uwPDsPC1M2ia1tGWXWa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dcd6e5e24bf30629874720ea8892daeb_JaffaCakes118

Files

dcd6e5e24bf30629874720ea8892daeb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f433e7fcc51e68080022754836705744

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

z4798m.o
Size: - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

jb5btirk
Size: 83KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

m37hbo6c
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ