695c1befc075f5f8e43c8c9042a2d01b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

695c1befc075f5f8e43c8c9042a2d01b_JaffaCakes118
Size

126KB
MD5

695c1befc075f5f8e43c8c9042a2d01b
SHA1

b2e470c20d1204fbc7d93a04b8e91701fbec89ab
SHA256

9ad1cf879164172332789c94c46b5c573624f7db0f1a1be76c01d85b1f41f446
SHA512

a8101e917b596cd999b66a2bad1cfb73fbf98f0ad9acec0085bd230e53fb8cbe8594a5826e89456bde9dd28f095a1ab69ac1590d2b51005a69ad53abd1741a02
SSDEEP

1536:LZJXwEZ8uTpmGRN0ZkH52qKaM/92SL7E:ndZzpm8r5/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
695c1befc075f5f8e43c8c9042a2d01b_JaffaCakes118

Files

695c1befc075f5f8e43c8c9042a2d01b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

edde0414dac6027c066f48d36f7f81dd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

user32

MessageBoxA

Sections

.MPRESS1
Size: 26KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 1024B - Virtual size: 853B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE