5ab0ce761e7e93630f0aa5761f2ab567_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5ab0ce761e7e93630f0aa5761f2ab567_JaffaCakes118
Size

252KB
MD5

5ab0ce761e7e93630f0aa5761f2ab567
SHA1

5801294f8bd906577f3e24f7a9b438728be93588
SHA256

d3e28ae2cea669ded50634410225804657ae4b863da8917856cbf1b507003b52
SHA512

b326191ac6f2eaf10c9892e40f10fcab0877e262c5ea59e049c628ca4df08d8241948ace6a138ac82af717e75f55bc58ed6e6449062d9384d980559a4b80c4ab
SSDEEP

3072:hHhFFQYXKw7E3nVMtWZrDBW0onrKYGejHKhphG3ReLR3GyjCme/KRPuccdA+c2:BhYYXKw+KtWfBWXnrD7HIrWRUxRPuGV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ab0ce761e7e93630f0aa5761f2ab567_JaffaCakes118

Files

5ab0ce761e7e93630f0aa5761f2ab567_JaffaCakes118
.exe windows:4 windows x86 arch:x86

84640d4c27770dc2f521c86d015aa263

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetDoubleClickTime

kernel32

GetVersion
lstrcpyA
lstrcatA
WriteFile
CloseHandle
CreateFileA
ExitProcess
FindResourceA
GetProcAddress
GetTickCount
LoadLibraryA
LoadResource
LockResource
SizeofResource
Sleep

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 490B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 238KB - Virtual size: 238KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE