f576b97c479a3a9b1e81282e72a0bdcf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f576b97c479a3a9b1e81282e72a0bdcf_JaffaCakes118
Size

982KB
MD5

f576b97c479a3a9b1e81282e72a0bdcf
SHA1

1b754876690808cf26c640efa57fb6b12de8a47b
SHA256

d674596eb661145f77f8d595392bb930cdaea22f7625334bb31408677cf46147
SHA512

a76b550508fee5d50ddd1c0cd7bfb6efb4a723ef65ec2aa4fa767fd21805592be6a5388d3809f8e1c12849373e7d2575d990db9d0379ad471054cf9ffde479ca
SSDEEP

24576:ct2Oqsu3Q/zSK6wWeQgFhRq/OxLyg22spPW5KtpGHx:sk1eQgDYELyg2Tu0KR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f576b97c479a3a9b1e81282e72a0bdcf_JaffaCakes118

Files

f576b97c479a3a9b1e81282e72a0bdcf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bd227ba966c127e93fe82f25f211eaca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
ExitProcess
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
HeapAlloc
GetProcessHeap
HeapFree

user32

wsprintfA
MessageBoxA

Sections

.data
Size: 971KB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_rsc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ