0628ccc8d1abf7a5e151e7783d49159e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0628ccc8d1abf7a5e151e7783d49159e_JaffaCakes118
Size

92KB
MD5

0628ccc8d1abf7a5e151e7783d49159e
SHA1

0857b58d792409f00c20540c7b0d2ab29f968e22
SHA256

873b405e32c823b37594204f68b05c848dfeb88ac0aa2fe92e60c1bb89066987
SHA512

4998410368055243fd3a69cead84b0b693ad949d1ea8a467db60a63488f28c541b3d71b593ac5d6c5085012fb3b399da1886d50a921e98582d7be0e89daccd1e
SSDEEP

1536:Az7XE3QjjRDnQmJ0FITbz8PTlX2Vf5FAvNfmLHfq9dk11C2MC6k:AzrE+joI3z87lmpiMS9EC2MC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0628ccc8d1abf7a5e151e7783d49159e_JaffaCakes118

Files

0628ccc8d1abf7a5e151e7783d49159e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

500ff1538958cc73738bf0c262a1773f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA

user32

MessageBoxA

Sections

0964418
Size: 17KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

2975546
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

0554590
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

9650338
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 18KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE