5a1b1080af2220073d957d281d4e1b1f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5a1b1080af2220073d957d281d4e1b1f_JaffaCakes118
Size

56KB
MD5

5a1b1080af2220073d957d281d4e1b1f
SHA1

9a1ce7fea639fdfdd3efe70d83f736cb9cf60b30
SHA256

433f350d7281afdd90567865ec9552767807beebd292318c30ccddd7f70451a2
SHA512

48e363cf870cfdae53a0d20559af0fe68f089c1fc5abcd955f4a31758c2451e5fd1c1db2ae3f6ee5e53b04c7fa4ac76eff73c2d4302e03b805de8d904c9754df
SSDEEP

1536:uAzjRpngfsaHv3eJwzKHC7o7ErY282okd/Ua:uqRd9+vJiyo7wYXTkqa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a1b1080af2220073d957d281d4e1b1f_JaffaCakes118

Files

5a1b1080af2220073d957d281d4e1b1f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c6bb0de3943eb1bd41df2be358de09c0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
GetTickCount
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap

Sections

.text
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE