19982dc5405e59fd4e321c5ec2d6e5d0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

19982dc5405e59fd4e321c5ec2d6e5d0_JaffaCakes118
Size

12KB
MD5

19982dc5405e59fd4e321c5ec2d6e5d0
SHA1

da624a740afd960ba57ed6064e95a8efaa1ca213
SHA256

4f97a8c2c22aedfc9934f03e2ceb731fbfa6770ab2ec9e45eae1d7bf43de8a3d
SHA512

23b8cc578438962c1dfc0d933b6672568a4532190549f0b7fb9195a58a184ad9c7ecb049196ff78b2a874c89a51630f7a55ea0fef7a865040ac4bc2eb3d130a4
SSDEEP

96:nPrYq7OlhyP2y4VV33lpgUJOFzKdwWclclIoZfsp6Q2:nTYqi+R4VLBewClcioZsp69

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19982dc5405e59fd4e321c5ec2d6e5d0_JaffaCakes118

Files

19982dc5405e59fd4e321c5ec2d6e5d0_JaffaCakes118
.exe windows:1 windows x86 arch:x86

105732f0c6968ac8bea2b4476eda4263

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

user32

MessageBoxA

kernel32

GetProcAddress
GetModuleHandleA
ExitProcess

Sections

CODE
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE