06b6cd8fc0333df6a96a66910f0a285d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

06b6cd8fc0333df6a96a66910f0a285d_JaffaCakes118
Size

47KB
MD5

06b6cd8fc0333df6a96a66910f0a285d
SHA1

ef5a8a9b805cdbda92d8b5162cc4ca1ab13a610f
SHA256

c028530021cf54bea92d43c4617aa6bce7d93b9ad67ada5ec9d1b2a46fc02560
SHA512

164d12d91f02a276a4a9dedda7bbc0106585623a2c7891e787412500950f6ab5a82de5c9d436aa14019ed8fb9e1526011588067c349047d0c024ee9fae05f38c
SSDEEP

768:L5hzKwJgiU18D6sogURAMfvmccgFGUV0rkGUm1gdFAUzoBdh4WlTQ1jUicqxAw3T:NRYBigLV0YGUmAGOgwlTAw3T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06b6cd8fc0333df6a96a66910f0a285d_JaffaCakes118

Files

06b6cd8fc0333df6a96a66910f0a285d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

15a40fc888a24c3586ca9563306e006f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
ExitProcess
GetModuleFileNameA
LoadLibraryA

user32

wsprintfA
MessageBoxA

Sections

.data
Size: - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE