01c78c47edcf6be95afe47c39d86aa78_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

01c78c47edcf6be95afe47c39d86aa78_JaffaCakes118
Size

58KB
MD5

01c78c47edcf6be95afe47c39d86aa78
SHA1

c16a6472f5474cb91f0a4787cd3f67b567b70833
SHA256

d2a998ce24a31c8101faace21bfc10f9fdf7b17c6829cf8e0d6ecf8ddc5c770c
SHA512

ac4448118c89832fe08974952d4e0d1cb3271b9ab3838b3f969bf00e2206c1d68fa7132c85030a955fa618467058e5895139906d144f87f1979afffc6573edcf
SSDEEP

1536:pJCKoLD+h/84UimkdxM9EFMeG3j5aGaJQtn9UXQLl:pJCKomy45ZufeGFKun9UAJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01c78c47edcf6be95afe47c39d86aa78_JaffaCakes118

Files

01c78c47edcf6be95afe47c39d86aa78_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8afbf9211984274dc7a21b630ecae242

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
GetTickCount
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap

user32

MessageBoxA

Sections

.text
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE