5d041c21a4f0ccb45f12abbb446959c2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5d041c21a4f0ccb45f12abbb446959c2_JaffaCakes118
Size

441KB
MD5

5d041c21a4f0ccb45f12abbb446959c2
SHA1

272d571c6dc64e358730add95ae7b9e75fa5bb0d
SHA256

2cf1aacd7aa85c6fb278499b5520685a81b110fa066dfae6ed7ab1c6a8a817e6
SHA512

c5c79f45a71cd249bc6216b1a2900a436d40846deb6c417944ed17714d0c9a57ef1cac1e26080c2fc23f52bddeda67e3443407ccdefec099aecec38ec7523490
SSDEEP

12288:T+7+3lcF3URfSbqM1EwWJo3z4FG6MYPjsbD:6ycqSowW23z4FG6MYPjsbD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d041c21a4f0ccb45f12abbb446959c2_JaffaCakes118

Files

5d041c21a4f0ccb45f12abbb446959c2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a590b6d8b44e88e4690b275a36e5676f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetDC

kernel32

ExitProcess
SetFilePointer
ReadFile
GetProcAddress
CloseHandle
CreateFileA
GetModuleHandleA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 306B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ