5c3e3f5e640fb1151f8a98e5721fec8c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5c3e3f5e640fb1151f8a98e5721fec8c_JaffaCakes118
Size

396KB
MD5

5c3e3f5e640fb1151f8a98e5721fec8c
SHA1

53c08a2705d89295a67120b97c9cbe7c606c2ee1
SHA256

068a4e51e737df5c74cb60d78e1e717406c0a364696bbf7fe3794f96e00510ad
SHA512

1aa650f287b9148da82f23e3dc94200fcea06e9814f1f85b2ba72489165cf59cbdb9a260b6810b9abc9b14c3c0c1cb5460c901a4fa0f4c51ee1f4f5de1e3396a
SSDEEP

12288:i2NYEJ3uXJu6Hwky+d7Xc47g/5NAprb0hH:i2NDRKZ/d7s47gRy501

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c3e3f5e640fb1151f8a98e5721fec8c_JaffaCakes118

Files

5c3e3f5e640fb1151f8a98e5721fec8c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6e1f282449492d5fc7a87e6f1c3ced5d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LocalAlloc
LocalFree
GetProcAddress
ExitProcess
LoadLibraryExA
GetModuleHandleA
VirtualFree
VirtualProtect
GetModuleFileNameA
VirtualAlloc

user32

wsprintfA
MessageBoxA

Sections

.data
Size: 353KB - Virtual size: 840KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 5KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_rsc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ