f818d2cc98067756249564e5167e5374_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f818d2cc98067756249564e5167e5374_JaffaCakes118
Size

60KB
MD5

f818d2cc98067756249564e5167e5374
SHA1

16380f18237e7c2c1cbe33ac7491e75c61e08559
SHA256

02b68e0f0a7faca6c50b95c9b9ffc49daaa23c3829d8fff40e1bb1e735a8a097
SHA512

f143528995955039c315c060100286d73217573ea229da7b6e18fe93b622f60a7065df0b5ed1441b6aa8188087e79896f7612612568aa660e709ba52ba72c8d1
SSDEEP

1536:2iqeZFjzkPiND6/+VUfmWJzwdgMAWBfo1c2Tjz0kc:2iqeok6/+VUfmWJnso1c2N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f818d2cc98067756249564e5167e5374_JaffaCakes118

Files

f818d2cc98067756249564e5167e5374_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8da559f2080415e7c3237fc63b689d5c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCPInfo
SetLastError
DeleteFileA
GlobalFree

user32

DialogBoxParamA
InsertMenuA
GetCursor

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 68B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 309B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ