5ccfb263e0caecdea0f9b4be3ac17ab6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5ccfb263e0caecdea0f9b4be3ac17ab6_JaffaCakes118
Size

915KB
MD5

5ccfb263e0caecdea0f9b4be3ac17ab6
SHA1

c6a111e20ab212039d5040a1ad3949e9b4b57b4e
SHA256

9539a8904ff0d6c2a1d096c884b1da67256547315179a28f605063f4ae7fcf52
SHA512

b8394a0f4cbe423b3493a627b5db2fcd76ee840a2d86abbfd9aa1c51ef83f916eb5b0438114f351f4ddb13b0a14639ec47af2ddedbf41d9febf5a1f64f5d3e8b
SSDEEP

24576:5BzqXEKffp1lhm8FTj5Wm5OXiZ6ca3xnCTRAygD:5drKffp3hXNj5L7ZnaklArD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ccfb263e0caecdea0f9b4be3ac17ab6_JaffaCakes118

Files

5ccfb263e0caecdea0f9b4be3ac17ab6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

536c35e361b8b671498d1baf00bbbda5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
ExitProcess
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
GetLastError
CreateMutexA

user32

MessageBoxA

Sections

.data
Size: - Virtual size: 3.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 883KB - Virtual size: 883KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ