fe85829382e1efb544e86d4a9b250bb9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fe85829382e1efb544e86d4a9b250bb9_JaffaCakes118
Size

297KB
MD5

fe85829382e1efb544e86d4a9b250bb9
SHA1

63d5cc2fffcbb5d5a4a58c1dc4d137b866089fa0
SHA256

26ffd3a7308f75cbaef886a01e700f363ceb36a6e8eebd8cdd5f46d4518ed28d
SHA512

af92c77fb9a7804a99a4885c1bc7ba42868bb412f0bedca2d7519eb72a8d43cdf0fc47f8f0675dae60b48769abeacae1bec0c1e8a1bd025618a4b6ad9e1b2b6e
SSDEEP

6144:RWW1ZLQUVvg01HpxA2//yQ9FlE6S+Zs39WURXgF:lk2g0ZpmEXHlC+S3YKu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe85829382e1efb544e86d4a9b250bb9_JaffaCakes118

Files

fe85829382e1efb544e86d4a9b250bb9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

acd9fa3a74cc4c1d92998e6ad62eeb8f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualFree
VirtualAlloc
ExitProcess
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
FreeLibrary
LoadLibraryA

user32

wsprintfA
MessageBoxA

Sections

.CODE
Size: - Virtual size: 784KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.DATA
Size: 254KB - Virtual size: 254KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.HackSA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

MissWe
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Root
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE