fde5303770886fe836219b30567e7325_JaffaCakes118 | Triage

Sharing

General

Target

fde5303770886fe836219b30567e7325_JaffaCakes118
Size

65KB
MD5

fde5303770886fe836219b30567e7325
SHA1

897d6d797f391bf0ab33da38d7cee1a5c1cbf7c4
SHA256

d0129b6f7dd3c8eadbf91b3b91c193c15f4ec61bbbabe3f3d0d1a35f7744aa63
SHA512

54e914032f87cbe8c91f2d5d96f536aa5f470c87618bd3b0710f6937e7238d8a3bce114ae44df58a5ca77596e8d9ace691daf494bfa81363905b1ff9906b3272
SSDEEP

1536:ilYM0NMuqNEkfVedUddFOoB7DjMH/fxynk529wbug:iWM0Gu8e0b/7vMHxG9wbu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fde5303770886fe836219b30567e7325_JaffaCakes118

Files

fde5303770886fe836219b30567e7325_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c0ca8fb524d53a294a75f3adfde9e816

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
ExitProcess
GetModuleFileNameA

user32

MessageBoxA

Sections

.data
Size: - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_rsc
Size: 688B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ