5a205e3d2953a36214cc6de8e3220ce6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5a205e3d2953a36214cc6de8e3220ce6_JaffaCakes118
Size

133KB
MD5

5a205e3d2953a36214cc6de8e3220ce6
SHA1

054521efb4465be4290d244c9c38da31a260d83b
SHA256

4be439a42aaf49b5a75fae99d2c5324cf529904f6c0784d4e504657cf7d432cf
SHA512

9f7d20f15c11bdefd46d971ec4a12b7409d276baf1b6dd87d18f68671d38662d18158e6b11180db7914dddfae1900981f7c9289a6d191c0cf44407d9416fe34f
SSDEEP

3072:U/HfhmAhVv1BULZLwY07vEKs+iZcTWp6yTvA2JM:KfhmADNwZUdBWkt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a205e3d2953a36214cc6de8e3220ce6_JaffaCakes118

Files

5a205e3d2953a36214cc6de8e3220ce6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fdbfec85672f73d2a4d49635454936d4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
GetModuleHandleA
LoadLibraryA
ExitProcess

user32

MessageBoxA

Sections

.text
Size: 1KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 122KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.perplex
Size: 1KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ