268598c135e256b0d199232c31251b2e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

268598c135e256b0d199232c31251b2e_JaffaCakes118
Size

72KB
MD5

268598c135e256b0d199232c31251b2e
SHA1

7c9e6b5b4f9d51690a946e430ebd52ff8604d4ee
SHA256

ea8456bc4892e87479c4e90c3688af1bff49dd8ad84f36943af58011e4a1c3ba
SHA512

9e3d7aecd2e2cbc8602c49233b53bb3512db85839b5e9b1bfa4f304e5d8b4632f8a644bfeefa22fc06c165fb16d747afe4cffe3ebab81bb561aed81c3e151564
SSDEEP

1536:UvE0Rp0Y8EOtLaxaP3F4OR12C93CpAYUFrR3vQLJ1QU0KqlVII:UvE0pOtLJP3SqoC93COYUFrRAJ1Qsqfr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
268598c135e256b0d199232c31251b2e_JaffaCakes118

Files

268598c135e256b0d199232c31251b2e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

58708828d5c31968bd59859804ecde67

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
GetLastError
CreateMutexA
ExitProcess
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA

user32

MessageBoxA

Sections

.data
Size: - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ