5abbd71a1c316df37fc3cd9d0dd5d14f_JaffaCakes118 | Triage

Sharing

General

Target

5abbd71a1c316df37fc3cd9d0dd5d14f_JaffaCakes118
Size

36KB
MD5

5abbd71a1c316df37fc3cd9d0dd5d14f
SHA1

7f801e5e9b40acb68249b02f063f46813e7d1246
SHA256

a576f21e1fde5054b53bd80bacff9ab20f1c8b510dd7f7a281d056bbfe5e912a
SHA512

991d35856115b4c689d65e465fb327f0eec3cc9d29fb85f07a01c25da7ee04a45cd2ed077d206b4e0f9ebf7a274959d30de7e57ba4b829c688172b4c76dfd6a3
SSDEEP

768:QATJxFQM1+Bw8JrV4UYW50z4C6AXTzM7WyjiTp:QA3cBw8JrydM7W7l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5abbd71a1c316df37fc3cd9d0dd5d14f_JaffaCakes118

Files

5abbd71a1c316df37fc3cd9d0dd5d14f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3b59568103553c4542f7431444f7aeca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA

user32

SetTimer
wsprintfA
KillTimer
SendMessageA

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 236B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ