272ac174007f94855d00f7dab4054ff5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

272ac174007f94855d00f7dab4054ff5_JaffaCakes118
Size

46KB
MD5

272ac174007f94855d00f7dab4054ff5
SHA1

315a33fc1fd3faa21ad2ddfe99abe78287f5d88d
SHA256

362a4d68c97e4861a672b813b7aa0b356a203de5253a838f9518062f434b2043
SHA512

1b42e5453ac4dc74a52a41659d24bd0046315d8260e521d072da21964b07bfa3354c87515fc4429bf4de51469d6ec07043f81c43ceeea24cf6ce1862b206ecac
SSDEEP

768:a7ZVd9mqpo3eoFz5OwZQtgxkjj0ZTVRm4A9EHRFnydCB2MCCL4G+Przf7B:SZVDmteoFz5zZk4RO4qEHVB2pWorj7B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
272ac174007f94855d00f7dab4054ff5_JaffaCakes118

Files

272ac174007f94855d00f7dab4054ff5_JaffaCakes118
.exe windows:5 windows x86 arch:x86

f5fba7d6ff3058396bfb34d646b019ef

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
ExitThread
GetModuleHandleA

user32

GetDesktopWindow
MessageBoxA

Sections

.text
Size: 1024B - Virtual size: 753B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 228B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE