5aaa12f3cb2b953a4d05d5195a860db5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5aaa12f3cb2b953a4d05d5195a860db5_JaffaCakes118
Size

618KB
MD5

5aaa12f3cb2b953a4d05d5195a860db5
SHA1

c69b01c30ae6c5de218834642b5d98e3d9a297c7
SHA256

431ba23c24bd2ea0cb9694be313b3d5676b0904015fd1abdb0cf3d946a4062c7
SHA512

a4f398c403c4cc7b8893290ee140820da8d4a7930812608eaa904afd833dd320d71192e8b7437bfcd6ba22904138d331a63c01ece537244a6c8e52648748cd9e
SSDEEP

12288:1qBfE3nC4lLMrL0Nh4eoj1mliehPWWkHvGdmpnOCRZDA95lv7Oc1AifYJF:85EFBojshxe0Gtgag+F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5aaa12f3cb2b953a4d05d5195a860db5_JaffaCakes118

Files

5aaa12f3cb2b953a4d05d5195a860db5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

aa1ca832e28e2c6a63685365c58b52b5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadModule

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 988B - Virtual size: 988B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ