ddd3ceeee7a70474fda8b0587c9f17f7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ddd3ceeee7a70474fda8b0587c9f17f7_JaffaCakes118
Size

1.0MB
MD5

ddd3ceeee7a70474fda8b0587c9f17f7
SHA1

6b3cd774b4cf9e846570c684969cff3db7701528
SHA256

18478e7e29d7d4d45ad50a180809c09ba84b2679068fd3ec67363b168c08d760
SHA512

853df4a23ead6aaa7d186169b95f98cbe1fa17dccde83eb0eeb47ae23cd8488e51f29cf7355587ac3344c7b16573a9df2a41da9e61f6b7575b0ffed9ac752829
SSDEEP

24576:sAJsxXlaZ/pZLxIu7IT2Bv+ZcL4518MGPPVsWuaCyGr8f9q:sAKxoJxIu7IT2ZTxVsW/Ur8f9q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ddd3ceeee7a70474fda8b0587c9f17f7_JaffaCakes118

Files

ddd3ceeee7a70474fda8b0587c9f17f7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

46b0675c1fd7681c7b19a1c83d5aff83

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
ExitProcess
LoadLibraryA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA

user32

wsprintfA
MessageBoxA

Sections

.data
Size: 82KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.asprsc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ