dcef7e85478f3e74bb85970d4f7f8f8e_JaffaCakes118 | Triage

Sharing

General

Target

dcef7e85478f3e74bb85970d4f7f8f8e_JaffaCakes118
Size

372KB
MD5

dcef7e85478f3e74bb85970d4f7f8f8e
SHA1

6558fb91c667f8bc9913348cee259bb8c916625b
SHA256

a1ed8885295df6f1fe60150a24ffef33cb743b02ad23a5eb9dfed42c63a86386
SHA512

6bf13cb0ae099ca06664e5bd4ad51922543c4b419d14447ab38819d6d0e3c663d97f7651151b116b28ecb16a078f3584e93da6534f4493f46b6c77fd4d88d9bd
SSDEEP

6144:kEpx+XKX2cfe3z2tuZumkTwLv9jV05PdVE3E+8jwz7q4M/0dj8dVN4YJGGQw3:wKX5G3AuZ6ULvxAPI3E+8joGwkpQw3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dcef7e85478f3e74bb85970d4f7f8f8e_JaffaCakes118

Files

dcef7e85478f3e74bb85970d4f7f8f8e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f433e7fcc51e68080022754836705744

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

opjmjuqj
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ficd.4pl
Size: - Virtual size: 292KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

l9r8398.
Size: 319KB - Virtual size: 320KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

z6o4u5fw
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ