55d285b261cf3e426d9758df27c4420f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

55d285b261cf3e426d9758df27c4420f_JaffaCakes118
Size

191KB
MD5

55d285b261cf3e426d9758df27c4420f
SHA1

f1796328bf4900292b9d15ffa985d3bf57aa981f
SHA256

e1eb4eff5111097bef5d3d798290536c22a529cfadc85ef0a1b513f21c5fccb3
SHA512

a0aca2bbec8d0f5af65329c1dfd67e763155d8fecaaea211c3de69876e4a0b6ab86e739c0bfcdb129ac033d7ab98acbb3a44c9f97be4bbdce75993fa532d9193
SSDEEP

3072:0xOzw03LoQI6UHvsut96p/oDg8nciNlmfTUhA5np+zUSyqCNpoh8ivR:0xOzwnL6pu362dnccm7UcpCs3NGui5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
55d285b261cf3e426d9758df27c4420f_JaffaCakes118

Files

55d285b261cf3e426d9758df27c4420f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

46b0675c1fd7681c7b19a1c83d5aff83

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
ExitProcess
LoadLibraryA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA

user32

wsprintfA
MessageBoxA

Sections

.data
Size: 182KB - Virtual size: 480KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.asprsc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ