5753cf07102e50d58ae1f2e4f4dc046a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5753cf07102e50d58ae1f2e4f4dc046a_JaffaCakes118
Size

370KB
MD5

5753cf07102e50d58ae1f2e4f4dc046a
SHA1

f49ca3056640b9de8e034bfa19d675a975b5344f
SHA256

c07a4293751821e8e0c84b9ab706b7515c42ddf6ba94abd0628bad6f52a5a032
SHA512

241f9ab002c00f70a8e70e8160f6c33a7d9cdd069b7b2814ac27828183f081fa31958d1b8bc28dcbb0fd289c93a9e2eed4ceda94f444ca56f958453e466874a2
SSDEEP

6144:QwKELZylvBga+SENJX2wHb/rsqXhaJd5Np7ggaZc8AarwY0B26PQntMl:QwKSyXSS8JX2wkjJlNM1HrwY0E2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5753cf07102e50d58ae1f2e4f4dc046a_JaffaCakes118

Files

5753cf07102e50d58ae1f2e4f4dc046a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bd227ba966c127e93fe82f25f211eaca

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
ExitProcess
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
HeapAlloc
GetProcessHeap
HeapFree

user32

wsprintfA
MessageBoxA

Sections

.data
Size: 361KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_rsc
Size: 160B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

xiangcao
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE