f697037726cc2a626caa7b8522dc9ed8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f697037726cc2a626caa7b8522dc9ed8_JaffaCakes118
Size

619KB
MD5

f697037726cc2a626caa7b8522dc9ed8
SHA1

d9e19141223f59b12f97544dc4c8d2f0b1eedf55
SHA256

2d3bc12ae36c3e4e025af924217a1293a19705b7d655ee307d3d58760d57153b
SHA512

d2028e8fb7e997658fdc54bc2c1622e0ae2c7b71a4896fc6815f295401a8d118183774cd1e3c331f677b7efb785e1ce3f801c7fda5252895271f7f350eb60076
SSDEEP

12288:pXQgARW1I6eQeFzzwPZiPBci2NagN6DG6iTTpEQv+TbZ3zYez8Iml2FSnVV:qgARaeBF/Hgw66eTpf2TNYanpF8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f697037726cc2a626caa7b8522dc9ed8_JaffaCakes118

Files

f697037726cc2a626caa7b8522dc9ed8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

aa1ca832e28e2c6a63685365c58b52b5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
LoadModule

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 582KB - Virtual size: 582KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ