15ec4c2136a9e47d4e1a1303a2f181e8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

15ec4c2136a9e47d4e1a1303a2f181e8_JaffaCakes118
Size

560KB
MD5

15ec4c2136a9e47d4e1a1303a2f181e8
SHA1

f692d3111e5358756397edb1af0b5272ab46291e
SHA256

e28a139b27a4862ea1afb6e3e8d55a351cb1d6348d801029f0c47cda2906f094
SHA512

486038db48e081d5036620cd520dda2ab29d705d16f93777f7bda509990c93ae9cdd823a43d8345cac39dfeea09c9b8239bfae1faeef5a5405b980d7c069bf73
SSDEEP

12288:m7UCyhsdEoT+R9YB4oagH0HPrfWE54wt8F:m7UCyhsyoc9fVvrowt8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15ec4c2136a9e47d4e1a1303a2f181e8_JaffaCakes118

Files

15ec4c2136a9e47d4e1a1303a2f181e8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b15de66230ef79b9b3facda6874287a5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
FindResourceA
SizeofResource
LoadResource
CreateFileA
LockResource
WriteFile
CloseHandle
GetProcessHeap
ExitProcess
HeapAlloc
HeapFree
IsBadReadPtr
GetEnvironmentVariableA
GetModuleFileNameA
WaitForSingleObject
CreateProcessA
GetStartupInfoA

user32

wsprintfA
MessageBoxA

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 592B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 544KB - Virtual size: 542KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE