5c23c4364fbd07a39c4c448af1842ac8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5c23c4364fbd07a39c4c448af1842ac8_JaffaCakes118
Size

177KB
MD5

5c23c4364fbd07a39c4c448af1842ac8
SHA1

71cd257dd0efcb3d4250911db01322b760358cb9
SHA256

827e87c687a3dc2fc1ae1c2c5a34a04e71b74aa0497ec4bfc2ded1cc1d7807ef
SHA512

5cd6cfe2b523c8c5c94b3e18e5cae31e7482f3a381bb41e081890fbafa8a322227e692472b5dc760be3d41bd7ababda442bfd45073b7f1e83a22e51fd0f4f660
SSDEEP

3072:TAuXXXXXXxAAAAAAAA7VyfUzJhi8jnmLuNNfDdofYRxYv0sSpMU4HBE:hyfUzjbquLCSh4H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c23c4364fbd07a39c4c448af1842ac8_JaffaCakes118

Files

5c23c4364fbd07a39c4c448af1842ac8_JaffaCakes118
.exe windows:5 windows x86 arch:x86

ef3a0c6b6b4f845864cd9e2b781d9c93

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
AddAtomA
ExitProcess
ReadFile
SetErrorMode
GetProcAddress
GetModuleHandleA
HeapReAlloc
HeapAlloc
GetCommandLineA
GetProcessHeap

user32

MessageBoxA

Sections

FzSPmHgA
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 1024B - Virtual size: 812B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

NcUEmpJm
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 396B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ