5f4f9b43d15f1237efb6a98ff35b3c79_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5f4f9b43d15f1237efb6a98ff35b3c79_JaffaCakes118
Size

102KB
MD5

5f4f9b43d15f1237efb6a98ff35b3c79
SHA1

7a38d9f24cc563654928cb8d3c3a5c683a39d9b7
SHA256

240756e07c10c43370f6b45fd97c782bfc1e1bbea1e3b5b7deb6c9bc0fdc302e
SHA512

1a006d95f79fa7c7c73a94358533bfff97463e5a6f6c0557019885661e737b5fa826d45c84e3c23fbd0930763336cd2e71c6ad79d72c73ab857bb02a99eb7873
SSDEEP

3072:cwifsk3iS7RTeqprqZblYYUFrRAJ1QsqfII:cwiUk3DRTeq1OAAJ11qfII

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5f4f9b43d15f1237efb6a98ff35b3c79_JaffaCakes118

Files

5f4f9b43d15f1237efb6a98ff35b3c79_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fa225e54b763276d6b0fd2dfe65f8a7a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadModule
GetProcAddress

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ