5cae9f153c99cae0ecbe46e18b83c41b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5cae9f153c99cae0ecbe46e18b83c41b_JaffaCakes118
Size

456KB
MD5

5cae9f153c99cae0ecbe46e18b83c41b
SHA1

b201c6a062522af6cfc4983502d83155c2e7ae37
SHA256

0cf4b9caf798fa80c04202d72dfc18b989a125ad915beb3f03a2f2bcfb1000d2
SHA512

078dfe4de1845caa85fd5b7ee87fec611b2674a5c7f6b6aa9a0d17a89921e26c6390f2e1921927b8d04e94b8b6af121c4a5292ff8f9ea9dc30602b2424fc69be
SSDEEP

3072:GHXzNlUR5SeeL84Gezv7F36LvFBWFCfsiSim4XzPbiVKf:GDNi5qtLQ5BPsKm4XfoKf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5cae9f153c99cae0ecbe46e18b83c41b_JaffaCakes118

Files

5cae9f153c99cae0ecbe46e18b83c41b_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a4369b36d40a36ec40b51c87262b293d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapFree
CloseHandle
GetVolumeInformationA
AddAtomA
HeapAlloc
GetProcessHeap
SetUnhandledExceptionFilter
UnhandledExceptionFilter
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
HeapReAlloc
TerminateProcess
GetCurrentProcess
IsDebuggerPresent

user32

MessageBoxA

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 824B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 582B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 381KB - Virtual size: 381KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 55KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE