a5bfe5110c9c2b9248ec0053e0087d3c_JaffaCakes118 | Triage

Sharing

General

Target

a5bfe5110c9c2b9248ec0053e0087d3c_JaffaCakes118
Size

653KB
MD5

a5bfe5110c9c2b9248ec0053e0087d3c
SHA1

fcf609a6c54b25588dd5231735a85347b31da0d6
SHA256

c97db0c9c6b62eef65dfe9330f6b73f235910e91b95dbe248cc509f36435ef45
SHA512

14799a89b2b3168f5e2e6cc38e213fdc097eb8c7c3026961bddc6c9176070af67d0913e68987cb5597e0325c40e6218b5a4a70a4099975dbf353a28d61040ad3
SSDEEP

12288:DnT2FXENI2fXYKtUtoefN5FbI7zF8RbAEO04svjraB87CRfSd:Dn6F0NI2AserW7zFgbAEOXSXaB87Cm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a5bfe5110c9c2b9248ec0053e0087d3c_JaffaCakes118

Files

a5bfe5110c9c2b9248ec0053e0087d3c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

acd9fa3a74cc4c1d92998e6ad62eeb8f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualFree
VirtualAlloc
ExitProcess
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
FreeLibrary
LoadLibraryA

user32

wsprintfA
MessageBoxA

Sections

.data
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 634KB - Virtual size: 634KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ