16484012d5d6c43d77b748d9fee8abbe_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

16484012d5d6c43d77b748d9fee8abbe_JaffaCakes118
Size

84KB
MD5

16484012d5d6c43d77b748d9fee8abbe
SHA1

5f98da3aa068bcd6ecb7145a6b1ae9060ae485a1
SHA256

c9a1ca8d73931d18580295c9c356ba9dffaba695e2dad1f2617a5eba8683485b
SHA512

28255b7cd5290197b46a6eab5b434f4670773e920d6ea0b62b624aea6b6ab114fd2fba99068eef6a292b6e422bc7cda8574c20ba3f06776331f9e307a4f1f0b0
SSDEEP

1536:HtZ/q2WKcWpyk2pfFdz3S7IhQ4Un+4sLGjjw/TJ/RC0pNfG2TLHq7:Hthq2ppfIbz3S7F4QWA8rJ5m2TLK7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
16484012d5d6c43d77b748d9fee8abbe_JaffaCakes118

Files

16484012d5d6c43d77b748d9fee8abbe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1738985ef3490ee0e357401a5c199c8c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
ExitProcess
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA

user32

MessageBoxA

Sections

.data
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 11KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE