3aafe08e4f6db8ca6d7ac7f4a233e57f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3aafe08e4f6db8ca6d7ac7f4a233e57f_JaffaCakes118
Size

85KB
MD5

3aafe08e4f6db8ca6d7ac7f4a233e57f
SHA1

38f85591f171a189019a9d1c1c90a49947aca4ce
SHA256

ce4a6d9c271975c59b7eae880dc3a13262943ac3eca7dd5a4b43572049cd3a91
SHA512

1cab72006f6347e48880d37ea5eee5099455a58457c3e5a46f2d3c9d6943b269a0456b8a37f845601d8a533172d250be98167bb13031aa4c9eecd902ff74caed
SSDEEP

1536:USr/Dl62J/D3UDa1eqyw4rlI0oqVkrQvGrwJaHog7Lb1mR1j:UG/Dl6grzIzwc9olr3wJkogvb4j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3aafe08e4f6db8ca6d7ac7f4a233e57f_JaffaCakes118

Files

3aafe08e4f6db8ca6d7ac7f4a233e57f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f433e7fcc51e68080022754836705744

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

uam5ndyx
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

vdzh4m6c
Size: 83KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

93od.w61
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ