08149f1daff47295acb3822851777014_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

08149f1daff47295acb3822851777014_JaffaCakes118
Size

264KB
MD5

08149f1daff47295acb3822851777014
SHA1

fc160c41e39e3dc985f4664fa224fb3e0991d56c
SHA256

9f3f00a2612e8d2898273115ccc40f8233a95f1b8dfa28c42915d367776e6030
SHA512

f0256eb45b05bf5b89d0904779994ec52b21ebb7d524d2068465e4f90d1ddd2d52bf40bdc5f7cf144b0fae25831b88b406df2b55635d0887df0eca2b665371a5
SSDEEP

6144:cAwAMyKzwIPoHbKDFZk+eKtAOOl2z5zeOk+EHL4do9nk0o:RwAMymtPGbY7eKROl4uedkRo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08149f1daff47295acb3822851777014_JaffaCakes118

Files

08149f1daff47295acb3822851777014_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1ec69ba71eb66fd3eb4f5c978322fbfe

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetProcAddress
GetModuleHandleA

user32

MessageBoxA

oleaut32

VariantChangeTypeEx

Sections

.MPRESS1
Size: - Virtual size: 488KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: - Virtual size: 944B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE