fda92e8df7ff8e0818213e8a0eef98b8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fda92e8df7ff8e0818213e8a0eef98b8_JaffaCakes118
Size

388KB
MD5

fda92e8df7ff8e0818213e8a0eef98b8
SHA1

acaf7ce8ee3b8cc23175285079be336ad0f226f5
SHA256

574502f516156557fd0a043ff875b05dfe4e6280031cd1104e43964da4dc3d93
SHA512

ac28d4f9e88e0141b46519f41a579dd0fceb1d38ab09586dcbb1eefd0236bd691a46d7cb80202019d9092c0661d045b9be44cb2a1f402f772b69a51b2a77825b
SSDEEP

12288:aIx41iz1qXWzZ/hdCegJ3bRuC2HR7jwpieyw:jK1iAXWd/3MrRtyRngEw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fda92e8df7ff8e0818213e8a0eef98b8_JaffaCakes118

Files

fda92e8df7ff8e0818213e8a0eef98b8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bd227ba966c127e93fe82f25f211eaca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
ExitProcess
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
HeapAlloc
GetProcessHeap
HeapFree

user32

wsprintfA
MessageBoxA

Sections

.data
Size: 379KB - Virtual size: 784KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_rsc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ