5999f74f64100750691bb5e881ad8fdf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5999f74f64100750691bb5e881ad8fdf_JaffaCakes118
Size

13KB
MD5

5999f74f64100750691bb5e881ad8fdf
SHA1

4353fbed95b301507b8d41bf77d0aaea89d1c941
SHA256

c1a4302ece7cd5a92e046c9d71d65771ed2f8454d310de062f2f555043c41869
SHA512

0bea1fc088083825042fd732071dee039dc8f863ca33039bbeec9e8ae23c21634ec399396934b17c980ba3142078b083019c23602c6b95efed8c134a2d5f182b
SSDEEP

192:ZgfaGbn3jtPSN/F4IomQgjIoUbERIMZV3bp6O+r4P+r4w:MJn3jtPSNNrBGaV3N6xrfrz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5999f74f64100750691bb5e881ad8fdf_JaffaCakes118

Files

5999f74f64100750691bb5e881ad8fdf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ef2505f1662baa875e6b7d1b9426fd5b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EndDialog
DialogBoxParamA

kernel32

GetModuleHandleW
GlobalFree
GlobalAlloc
ExitProcess
GetModuleHandleA
GetProcAddress

Sections

.....
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.r....
Size: 512B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.....
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.....
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE