1105c484bd185003486724fcb7893e1e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1105c484bd185003486724fcb7893e1e_JaffaCakes118
Size

75KB
MD5

1105c484bd185003486724fcb7893e1e
SHA1

d8b38617443046be9ff9b5f6705596c6f3a8619b
SHA256

06b9096b4ae67741a22337914a62b879734b2373e757371c3be2c5dde464c57f
SHA512

a2fe87781de6105e4a56368ec73ec090aa6d08dc935412027159e6693ae67f32add72a85c591ca51aadcb32f7ed0d7314fda443a54914010ac8488de692a79d8
SSDEEP

1536:b9O3oojL0H9GktTvreBiJX29MKgsplC62+ti8cPpKl:bioojYdGk1jeUb+LrA8cPo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1105c484bd185003486724fcb7893e1e_JaffaCakes118

Files

1105c484bd185003486724fcb7893e1e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

58708828d5c31968bd59859804ecde67

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
GetLastError
CreateMutexA
ExitProcess
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA

user32

MessageBoxA

Sections

.data
Size: - Virtual size: 208KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ