607c6edf52e3b19694fff9306b270c6c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

607c6edf52e3b19694fff9306b270c6c_JaffaCakes118
Size

46KB
MD5

607c6edf52e3b19694fff9306b270c6c
SHA1

414d8c4d349e6d869464d88f24edba25b86ed79a
SHA256

72360268357547ddca17f0f0238e7c3a67b6df65c42990521f2b3da142cbdc97
SHA512

1160173015f9533d232f6e385749d8dc099555dd5557b610bdd68de6b2876516df2fbb087270b914882ca941550a3b82699e0f1189ecd61663c8e6f8c439d09b
SSDEEP

768:a/oVdMdAHusOpl+C2FcMk9Ig36SaEmjKtEW7IELZqj7HqD5CzJ1iOfQQ4v:GoViU/il+C2Fc7aEmc7IUEo5CvieQQO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
607c6edf52e3b19694fff9306b270c6c_JaffaCakes118

Files

607c6edf52e3b19694fff9306b270c6c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

f5fba7d6ff3058396bfb34d646b019ef

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
ExitThread
GetModuleHandleA

user32

GetDesktopWindow
MessageBoxA

Sections

.text
Size: 1024B - Virtual size: 766B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 228B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE