de400cd1cba822eafca301127fb0a6af_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

de400cd1cba822eafca301127fb0a6af_JaffaCakes118
Size

73KB
MD5

de400cd1cba822eafca301127fb0a6af
SHA1

181b168f833556ce09e3ac1826c87bda71b8e498
SHA256

9335470412c0684d76a50ade1606d1b6fbf1fd8692307e802cef6403f14828de
SHA512

1809ad2dcdd3a1c172b6a49e30012e771162b626c77fe3ab205598ab4161300a237b7580179f94ab856c836cacdb912caac690791096464867c66ff56b516d73
SSDEEP

1536:iQlQO8wGMMBGD7rNJxWXo1559gCipiQmX/NvcG5CRYN9fim:J+JwC05WXodic5+G5Ffi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de400cd1cba822eafca301127fb0a6af_JaffaCakes118

Files

de400cd1cba822eafca301127fb0a6af_JaffaCakes118
.exe windows:1 windows x86 arch:x86

e2649837c59f87885ca4eb82bebd799b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
VirtualFree
GetProcAddress
EnumSystemCodePagesA
GetModuleHandleA
ExitProcess

user32

DialogBoxParamA

Sections

.code
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 282B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ