fc81015984b29065286eb869687c8ebd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fc81015984b29065286eb869687c8ebd_JaffaCakes118
Size

420KB
MD5

fc81015984b29065286eb869687c8ebd
SHA1

e7db5d78cd30af1f439f1ae52da10ff370416b42
SHA256

aa163a32251d7a26c4e876380828820d5e1497ad6c32b6bcb1fc4e869e07ebf2
SHA512

3c392cc64c9c51d95b68bc2d21160a4b338118a7a203dfdc2e8265799ac80604c130766c3d50224dc91b59f2d345fb5caef7037eba329ca04954648f5b101dce
SSDEEP

12288:wQ2eNCufTK0UO2A7zvW+3JZBa8TjkiMWLhl:4eD7KTYLW2JG8TjHMml

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc81015984b29065286eb869687c8ebd_JaffaCakes118

Files

fc81015984b29065286eb869687c8ebd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1738985ef3490ee0e357401a5c199c8c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
ExitProcess
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA

user32

MessageBoxA

Sections

.data
Size: - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 413KB - Virtual size: 413KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE