5c795788ef110135417c2131e6f47b8f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5c795788ef110135417c2131e6f47b8f_JaffaCakes118
Size

4KB
MD5

5c795788ef110135417c2131e6f47b8f
SHA1

b55e4c4a352299aa6b1458de5faba5c294f8e59b
SHA256

1fe6457306e6857ab137aa3596e657dc6ac304b197586bac1100e7ddc46d972d
SHA512

bba68504e4eed79c58a00e6f71dd174eccca2fff33ede62c730ba065d705f99f2989fc1fbd561264c9aca7bfa4bee73f25ff10a1edcc4cc43671e7a87fa84880
SSDEEP

48:ij40okEpfiXLvlIrxi8n70y72GGdoBMhqY3:KxmODlIrN7f727q2hF3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c795788ef110135417c2131e6f47b8f_JaffaCakes118

Files

5c795788ef110135417c2131e6f47b8f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1820067c7c53cd8277e73a8882c3ef2b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
EnumDisplayMonitors

kernel32

GetModuleHandleA
lstrcatA
WriteFile
SetFilePointer
CloseHandle
CreateFileA
ExitProcess
GetModuleFileNameA
GetProcAddress
LoadLibraryA
ReadFile

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 414B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ