23c56fda0d31b83fe3ee749dbb961ac8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

23c56fda0d31b83fe3ee749dbb961ac8_JaffaCakes118
Size

39KB
MD5

23c56fda0d31b83fe3ee749dbb961ac8
SHA1

ece2489ebace847183c8565994be49beadd14509
SHA256

a2395444ac221f6d33d8111333a00b9fd40db076717b82646dd7137dea01537b
SHA512

31755077479e3b0a063abc9a3ac23e9e23f69c9b72f9c6ee33aadebcd7a416faddcb217245a3afcc74c2ad1304ba00671baf2bf1090be399746df487b240b8e3
SSDEEP

768:lHGPrLmIdPu0ZVQ9u9qI2AbS5nzPzzantS8YzXBA:FGPrLmKW0jh9qvKqLvYUFrW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
23c56fda0d31b83fe3ee749dbb961ac8_JaffaCakes118

Files

23c56fda0d31b83fe3ee749dbb961ac8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d7c3c9382b43e5478a56ea7d42452cdb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_SYSTEM

Imports

kernel32

GetProcAddress
GetModuleHandleA
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap

user32

MessageBoxA

Sections

.text
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ