f5a03e475a24f562c4e6548dca74332b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f5a03e475a24f562c4e6548dca74332b_JaffaCakes118
Size

233KB
MD5

f5a03e475a24f562c4e6548dca74332b
SHA1

454e2dc5b7aa3b156e535db94b7c943213ec2b71
SHA256

59d9078b5225a48792e6e46f6549e0b7f722859f39710775ddecb799042bf32d
SHA512

bda810ef5e64067cd0b7b8e23b6e7004d1551048066253f6639c4a298256240c9f5990bc11031771627e5a7f86486561bf32f0fa4998fd5c004dbef4704cd166
SSDEEP

6144:FpRcRxMXbXgy2tLX2b1PKcGxYObrTfFmVRYU:FpROUgDtyxCcIftmV3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5a03e475a24f562c4e6548dca74332b_JaffaCakes118

Files

f5a03e475a24f562c4e6548dca74332b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f433e7fcc51e68080022754836705744

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

652rxyc2
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

56szgwnl
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

45k.19ei
Size: - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

sumn7z5l
Size: 176KB - Virtual size: 180KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE