2570d4181fce2bce2a9b3124e3b1853c_JaffaCakes118 | Triage

Sharing

General

Target

2570d4181fce2bce2a9b3124e3b1853c_JaffaCakes118
Size

386KB
MD5

2570d4181fce2bce2a9b3124e3b1853c
SHA1

6655320fa6acf2bd5572e2c722d3674f7db4edd8
SHA256

f0e89f8189b58eb2963242c55666787d8ce255d6a5a852ea858561c860dabc05
SHA512

1c431d0509ebc2aeedcd2633edc61f2bb137be23d900baee79c63f0b96eeed310155cba5c507069e6b00752e0bada390f7ff46e6a8e32f14df64bdf014742765
SSDEEP

6144:nZUeBp0sShhxBwkrmlWmz7HU9M0cimAu0Mly2QA8vGWYlLIGLTGd5xPlvnuk4ZMX:nZFg4bhzkcnlyW0GWCLqdnPEpcSA7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2570d4181fce2bce2a9b3124e3b1853c_JaffaCakes118

Files

2570d4181fce2bce2a9b3124e3b1853c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fa225e54b763276d6b0fd2dfe65f8a7a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadModule
GetProcAddress

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 724KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 332KB - Virtual size: 332KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 35KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ