15f6f43c3e3c563dfb26e96d5d00ab26_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

15f6f43c3e3c563dfb26e96d5d00ab26_JaffaCakes118
Size

104KB
MD5

15f6f43c3e3c563dfb26e96d5d00ab26
SHA1

55b3f140ce6d482073ea0eacf31ae53df9eaa3a1
SHA256

a9f490c856a27f2b02b9f2ebf31c1a26d22ca0797d6770d1fe584545be3c51ca
SHA512

f405db9b3977adcf0e7c573a9222abffce34556cf7c52182d29ce279b3a47acff9210d6a3ccb2dca277932de030a5338827b11e27082eb17de423f64b19a6d74
SSDEEP

1536:Hn/oYXOCZTwAikRQGsalopv1DBvl82kwn8ndkb9dhgCFoWZhoVd:H/o+//U1DBtpkw8ndk7h16T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15f6f43c3e3c563dfb26e96d5d00ab26_JaffaCakes118

Files

15f6f43c3e3c563dfb26e96d5d00ab26_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d1b1d470695815e5d2859c5f33b4954e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
FindFirstFileA
FindClose
FindNextFileA
FreeLibrary
HeapFree
ExitProcess
HeapReAlloc
HeapAlloc
Sleep
lstrcpyA
GetProcessHeap
GetProcAddress
LoadLibraryA
GetLastError
lstrcatA
GetModuleHandleA
lstrcmpA
GetModuleFileNameA
GetCommandLineA

user32

wsprintfA
MessageBoxA

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 600B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ecode
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE