ff7a7e1cc786f863ab84c4e3b8933612_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ff7a7e1cc786f863ab84c4e3b8933612_JaffaCakes118
Size

99KB
MD5

ff7a7e1cc786f863ab84c4e3b8933612
SHA1

554982a516699281d810d93e19b0d991f3bc445d
SHA256

8639dd1d1de6c2a328d9d92650b64cc2b81b5f96a5077b5aaa89d1d7212b2a09
SHA512

e21eee6c08546f39ef539523cd2671bee9d38bfdc2a59d5809526515a623100fc99595df48c1c5608b32b072060c963f7ab3affdfaeac6f8b44ea3779f626c4c
SSDEEP

3072:9pMVKrqNsGv6CYjEKCFTu8oGvpyTsEMngC:9pmsuLYjEftxqsEMx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ff7a7e1cc786f863ab84c4e3b8933612_JaffaCakes118

Files

ff7a7e1cc786f863ab84c4e3b8933612_JaffaCakes118
.exe windows:4 windows x86 arch:x86

536c35e361b8b671498d1baf00bbbda5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
ExitProcess
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
GetLastError
CreateMutexA

user32

MessageBoxA

Sections

.data
Size: - Virtual size: 992KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ