5f7c64e4a4ae4579c47f1b34c32cac3b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5f7c64e4a4ae4579c47f1b34c32cac3b_JaffaCakes118
Size

21KB
MD5

5f7c64e4a4ae4579c47f1b34c32cac3b
SHA1

d0c41b44f32046fe07491ddb863ac1b1ee1ecdfc
SHA256

e1599b82b1049440820cad0d1dc2313a696b2a899907fe3d1230a1d075c27d87
SHA512

10ba3364b53fbc4dd8ccdeff4e1ff93172d3d32c0ae0620ba0f9831cd14009d4bd2562e051a3b5e76f9380829b1007abc3b9befc18748cd87473167c274b0fdd
SSDEEP

384:oMOq9GqNQyQbrcgeIqIFPuZhrd8w2gmKDLr:Gq9Gq48FOuho

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5f7c64e4a4ae4579c47f1b34c32cac3b_JaffaCakes118

Files

5f7c64e4a4ae4579c47f1b34c32cac3b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

739cf4b246570638dc5d8728db079f94

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
VirtualProtect
LoadLibraryA
GetProcAddress

user32

TranslateMessage
DispatchMessageA
GetMessageA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 280B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ