5ca580bd8058a3119f0c157fab958531_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5ca580bd8058a3119f0c157fab958531_JaffaCakes118
Size

46KB
MD5

5ca580bd8058a3119f0c157fab958531
SHA1

0d873f42f0cf4e8158a56d189c72634e5e03aa98
SHA256

1973a1cb8aab0cfe253e252e7e8509c029ffa1433cc2c32e4c71f1cb4d7ee950
SHA512

baa78bfcee19df02f87323facc89d3e67216e25cb343f36085906c1383fbff22cd4e4d877225bf09afb4713d46c3477275b24bca3ebc17e0bfdb0316cea398a0
SSDEEP

768:+T9hVar2BFewNjCNl77L0W+8XI4iEy8Cq8sTjH1p5UZegtOqkluTB9E/h:m9h06RBCz/oW+nR9qtXnCt8leBW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ca580bd8058a3119f0c157fab958531_JaffaCakes118

Files

5ca580bd8058a3119f0c157fab958531_JaffaCakes118
.exe windows:1 windows x86 arch:x86

8a8b379ade85c99ac7c7f1c093398721

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlUnwind

user32

MessageBoxA

crtdll

_iob
_itoa
__GetMainArgs
_strnicmp
abort
exit
fputc
fwrite
localeconv
memcpy
memmove
memset
pow
putchar
raise
signal
strcat
strchr
strncmp
strtol
wcslen
wctomb

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 608B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 88B - Virtual size: 88B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 808B - Virtual size: 808B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE