0bb151fe0acf4bc8dcc6079351d76750_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0bb151fe0acf4bc8dcc6079351d76750_JaffaCakes118
Size

81KB
MD5

0bb151fe0acf4bc8dcc6079351d76750
SHA1

fced95dda818505db628e140f302d5d07fad913b
SHA256

cdbad3aecf545d5d56d918f7fab18cc43a76f53ed7d28c0bf60cf6ef4b3974f0
SHA512

ff692b3403f2fc293e5659c440c8f11a14829c3cd5a7b4c3013f4a09337ebd66d2ae97dbfd5f8f45ea4fd084fe44aacc91c21bdfe1b8fe12630f40b957ca3fbf
SSDEEP

1536:HC62jsXzBbQMnUVq1hD5jYJuv6kS/YAai2hKtXRpd+TRIsEPoTfZVrxds4Vx4JX:H6js5IahD5Vu/YAAYXRpwUOD4B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0bb151fe0acf4bc8dcc6079351d76750_JaffaCakes118

Files

0bb151fe0acf4bc8dcc6079351d76750_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f433e7fcc51e68080022754836705744

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 384KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

oh93j6ov
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wcay4b6
Size: 79KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

yomedkio
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ