61794d2d3fd6cfbcffff0f3035dc48c7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

61794d2d3fd6cfbcffff0f3035dc48c7_JaffaCakes118
Size

16KB
MD5

61794d2d3fd6cfbcffff0f3035dc48c7
SHA1

1124d06fbca3bb43119d81a1d55054b13dc10374
SHA256

466d113c9a4709d8dfa6152f2b0a1f4e86e342ab56bf9b74e7baea5f5e45e557
SHA512

0017a7505db707b74c62930da923b64ab62171db4de8e0b42616888a04ef2d012546ae27b80e332625046c130f408c11150ff9721b8437077ba5f49bc3335d58
SSDEEP

96:Z1qDBNC9jN8IatfNkWm90LzucH1CWwiGT46N5O/DKP:GDBNC9jy72WpH9EWwFT46NQr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
61794d2d3fd6cfbcffff0f3035dc48c7_JaffaCakes118

Files

61794d2d3fd6cfbcffff0f3035dc48c7_JaffaCakes118
.exe windows:1 windows x86 arch:x86

e085e74fe31acb4703064983e139c982

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetModuleFileNameA
GetFullPathNameA
CreateFileA
CloseHandle
CreateProcessA
ExitProcess

user32

MessageBoxA

Sections

data
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

code
Size: 512B - Virtual size: 223B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 269B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ