072e8e483f5c9573e1bb294f302aaf3f_JaffaCakes118 | Triage

Sharing

General

Target

072e8e483f5c9573e1bb294f302aaf3f_JaffaCakes118
Size

443KB
MD5

072e8e483f5c9573e1bb294f302aaf3f
SHA1

b01f29d19af84ca3c3f45dd6178a8d51c12068e8
SHA256

b7b92cc7ede8e5f054c159d63e462df8e6a1c2aa1e3401c80ae54563b6e680fa
SHA512

fba2c13eebed20af76cc9066f544167a24aaecebd60404e73b955fd14dadc94c136d1fa7f3d18ac7667791c6419511caecd449e424cf25cb57243219fec35ff9
SSDEEP

6144:601IZDxwrXZjlMud/Kh53bSgENjhioC94VPQuqqGpPm1hGr18Yh4paWc:n1FXZOu5Kh53/ENJdPQuKO1hGSAuM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
072e8e483f5c9573e1bb294f302aaf3f_JaffaCakes118

Files

072e8e483f5c9573e1bb294f302aaf3f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f433e7fcc51e68080022754836705744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree

user32

MessageBoxA

Sections

.text
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

eeh6ojvj
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

lps4y8.1
Size: 266KB - Virtual size: 268KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

qxavyyb6
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ