fb051744fc29ce4504829012419887a4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fb051744fc29ce4504829012419887a4_JaffaCakes118
Size

6KB
MD5

fb051744fc29ce4504829012419887a4
SHA1

482a45e358b931edbfb4383be4be4155535c96b2
SHA256

e76d27877542fa40849623cda672fe4dbaf2305712631e27fbf3549a943853e6
SHA512

1b56b3ef506a82c1f2856d547a65be3e535b5e08a189d3823ef20678e3b495f02dad7f4a619d17f80bf462ff16243e5259cf7d6d156081ae6656c8b86ce60891
SSDEEP

192:knWDQgPbwSLDeMII3rrG/JunJNJZJ921:ZwSMI3rrG/JunJNJZJQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fb051744fc29ce4504829012419887a4_JaffaCakes118

Files

fb051744fc29ce4504829012419887a4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

60d08cd06100d45f4871635214431cdd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
FreeLibrary
GetModuleHandleA
GetCommandLineA
GetExitCodeProcess
ExitProcess

oleaut32

SysAllocStringByteLen
SysFreeString

user32

MessageBoxA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 426B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ