02b561418b9197b1163bb34a3020f737_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

02b561418b9197b1163bb34a3020f737_JaffaCakes118
Size

535KB
MD5

02b561418b9197b1163bb34a3020f737
SHA1

fab66a1f3f9194d64f428b2fde330682074080d6
SHA256

14de568a5c319b7e93508f334f8d7e272a885cdbc83fcc412677e064cf28c543
SHA512

6c3a20e399c07b52a18f09c76e5d5a8c8946d6b604957380ca385a641b6577487988ffec0043c2e4afa23abcd08bd424d791b815649f18e15560e6bbdd349357
SSDEEP

12288:kb8WbeXACyxO2T/ynA7LKragIg/HDIoFvByhBD09W:kwSGAFxjbLK7I6Or

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
02b561418b9197b1163bb34a3020f737_JaffaCakes118

Files

02b561418b9197b1163bb34a3020f737_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f433e7fcc51e68080022754836705744

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree

user32

MessageBoxA

Sections

.text
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

acs5zhyc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

su3fnqj0
Size: 422KB - Virtual size: 424KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

gtlcko9y
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ