2b574ecbcb7409c7264ddc31ec2f5380_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2b574ecbcb7409c7264ddc31ec2f5380_JaffaCakes118
Size

480KB
MD5

2b574ecbcb7409c7264ddc31ec2f5380
SHA1

bc14399f45e0906ec6e2987654f8c0381f79f71a
SHA256

b53ea8e860c482e0d0c5b2fa9bf18cc04a2b0c60f39c526a61e346bba9880079
SHA512

a55543efe7ec342307a91afb3a2508069a828fd504f5669026af3711e99e51dcd7846797a46864bc79642aef413c05404924d1949bb7723501b0b63381fc1a9c
SSDEEP

12288:miOETGj+msGFTmDQg+C73LYUKDp8PFrG9Fsh:mi5a+msGNmDaCDL/SeJG9FQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b574ecbcb7409c7264ddc31ec2f5380_JaffaCakes118

Files

2b574ecbcb7409c7264ddc31ec2f5380_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fa225e54b763276d6b0fd2dfe65f8a7a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadModule
GetProcAddress

user32

MessageBoxA

Sections

Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 430KB - Virtual size: 430KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 35KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ