467b7ecbe4ff3715fbf1014b1fb2bad9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

467b7ecbe4ff3715fbf1014b1fb2bad9_JaffaCakes118
Size

64KB
MD5

467b7ecbe4ff3715fbf1014b1fb2bad9
SHA1

99cd886fb059d578cc9618a15b3afeeaf226a1f3
SHA256

05c5415e342a1ff413e30ab529c8c7115ad793d95ac1294f83e979c9b395c7a4
SHA512

b1eaa826a7aee09b3a683d9862245b922cc09c69d086da299bc37484b0aa7484b74317ac3a3ab5f5cd7f9c9fd851b1c871ac949c87e6d496916320ba48391d2d
SSDEEP

1536:XyzUwIBnxYAaqI2PDPPO9mxb+92L52/h9X5:Man2zqd7P8KanJ9X5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
467b7ecbe4ff3715fbf1014b1fb2bad9_JaffaCakes118

Files

467b7ecbe4ff3715fbf1014b1fb2bad9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

15a40fc888a24c3586ca9563306e006f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
ExitProcess
GetModuleFileNameA
LoadLibraryA

user32

wsprintfA
MessageBoxA

Sections

.data
Size: - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE