0d1ef70a05803f66f6c759398b836990_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0d1ef70a05803f66f6c759398b836990_JaffaCakes118
Size

268KB
MD5

0d1ef70a05803f66f6c759398b836990
SHA1

aac8b42e1988538ae0bb76bfb4fd9561f206bde4
SHA256

095c28cc218d38d38006d8022233ec1ec25970af507ac964ae3cf523088c02ef
SHA512

2a8736d2784b937e7104220faf9575ffcb1da2e27537eabcddd5fadb84677f193303521ee98775551c6e3383c3509162cd33543c5e5f998cea33581f9c52734c
SSDEEP

6144:esu2urzh9xu/Xkauz29JuzAvu2urzh9xu/Xkauz29JuX:esutrzh9xOXk7zAvutrzh9xOXk7X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d1ef70a05803f66f6c759398b836990_JaffaCakes118

Files

0d1ef70a05803f66f6c759398b836990_JaffaCakes118
.exe windows:4 windows x86 arch:x86

adb8279b40d2d99602a7cc51cf0ea816

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
GetModuleHandleA
ExitProcess
HeapAlloc
HeapFree
IsBadReadPtr

user32

wsprintfA
MessageBoxA

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 284B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 252KB - Virtual size: 251KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE