f9ba1eb296e96211cf236709e5c522fc_JaffaCakes118 | Triage

Sharing

General

Target

f9ba1eb296e96211cf236709e5c522fc_JaffaCakes118
Size

2.2MB
MD5

f9ba1eb296e96211cf236709e5c522fc
SHA1

9bf4f26766c0540f20831c162d1d08e8fcbdbada
SHA256

2f362630565e8385d678e195f72b2b04f1830ae0839ffdcf4eca599325ecdb79
SHA512

4399ebf0c87278ad34e6b7a6dabd33f5d49fd6d66a7941f81a37ad2e50b0e2f9a40bd9aea1619d3b62012a211bbcc3442f99dd35f72480e03b06315ec6bd1a41
SSDEEP

24576:7FfqSL3Y1uSHCrY9D3pbfP/du7np/7po6Uc42CkyempM8ZmslmPrU5BCv4FD9laF:7tx1rYxpblypA2CywmserI44FhUf5MA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f9ba1eb296e96211cf236709e5c522fc_JaffaCakes118

Files

f9ba1eb296e96211cf236709e5c522fc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dfcecaa317492513e56130f5d164dda8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32 user32

LoadLibraryA

user32

MessageBoxA

Sections

SE
Size: 1012KB - Virtual size: 1012KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

SE
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

SE
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

SE
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ