25079194cde05b308cc016d48cd38d13_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

25079194cde05b308cc016d48cd38d13_JaffaCakes118
Size

103KB
MD5

25079194cde05b308cc016d48cd38d13
SHA1

af160c63986fac6d47ea1ba6d43e77907bbff32e
SHA256

e270c255f8c15bb82dcb54e29d17357b1779be5372bc28a280bd5626df7c98e4
SHA512

03a32b0ad8e8d96d610561845ecef7a7857e16cfcbd5ff97a74e38f5047b01791b7df402e8d6c86c436d048b6301a7100e8777d4b02c3a3c17cd0db9e908f32a
SSDEEP

3072:6CKomy45ZJ+vA8ch7J/ZxLjfMlnj/abEedh:J4rHnTUlj/GEedh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
25079194cde05b308cc016d48cd38d13_JaffaCakes118

Files

25079194cde05b308cc016d48cd38d13_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8afbf9211984274dc7a21b630ecae242

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
GetTickCount
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap

user32

MessageBoxA

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 74KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE