5bb6d4c35781e8c3b5279baa99d49098_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5bb6d4c35781e8c3b5279baa99d49098_JaffaCakes118
Size

32KB
MD5

5bb6d4c35781e8c3b5279baa99d49098
SHA1

5666c6d56b0f9649b619fa6fcf4b34039267efcb
SHA256

d3c6ddf10ce34cc80306b47094c1e39139ae010ff07398168d8248e786163f59
SHA512

1579c9b82f27c5aa6b363a0e6782d6254e22ac7573fa5156bf7226fb65e12b67005cd6e4620e026b60b55bfa37f092be1d10d47e85f506e6ce0da8b1bb314e85
SSDEEP

768:7m3kx+GPi0XqVnREyGfNNqxAzbGRwPGQ6Dt+MV:vMGP2nRHGfNNPqRwPGQ65d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5bb6d4c35781e8c3b5279baa99d49098_JaffaCakes118

Files

5bb6d4c35781e8c3b5279baa99d49098_JaffaCakes118
.exe windows:4 windows x86 arch:x86

81c39931ec4224b6e145cca352129746

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
LoadLibraryA
GetProcAddress

user32

GetMessageA
TranslateMessage
DispatchMessageA
wsprintfA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 310B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ