4d9e5d5fbc724a1cba1435360c5f86d7_JaffaCakes118 | Triage

Sharing

General

Target

4d9e5d5fbc724a1cba1435360c5f86d7_JaffaCakes118
Size

30KB
MD5

4d9e5d5fbc724a1cba1435360c5f86d7
SHA1

2da7648f705f0938c739d300bf9581c3214468ce
SHA256

22913cf182649ddc2cb0be656c919bdd11b8b347b1faeefbb36aa773d5c840d9
SHA512

206ffbe592f3cd9e95dfe4526013c0539c1df52395862fbca322b78d3463c2466e4b5275c035b6ecc163b6e5ee87c7de7d3eee059e8f1623c8cda51c0f70f74c
SSDEEP

768:C+fjrnk7mVo15ybYt5Q/bsWkTBmwClbO:XXk7F5QwWG6O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4d9e5d5fbc724a1cba1435360c5f86d7_JaffaCakes118

Files

4d9e5d5fbc724a1cba1435360c5f86d7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7f2e49b54cf3cc086ecfd6567ba729e1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetLastError
GetModuleHandleA
GetModuleHandleExA
GetProcAddress
LoadLibraryA
Sleep
VirtualAlloc

user32

MessageBoxA
SetLastErrorEx

Sections

.text
Size: 768B - Virtual size: 768B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 344B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 256B - Virtual size: 62B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 23KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE