69c85075288333d6c1f904bde0485c20_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

69c85075288333d6c1f904bde0485c20_JaffaCakes118
Size

91KB
MD5

69c85075288333d6c1f904bde0485c20
SHA1

cf003553de4a1d52382019a8a600be1b764d198b
SHA256

e5f128a5c27402fcd213629d621d7b3498ed72e00229d53277bb38b56a4706c8
SHA512

8271f28896eae573975d8916d68ea62760a9915547ce0bcdabf6b686cfb8170f662ea0e6d13f20532550d015c43fb84e9474c0d1f208646ec50d26ccb6298d16
SSDEEP

1536:bZ/nEkh8OTKNKKLBc3PG4xy4KqgseW56QKcQabl27x+HQGHA:dxhTKNKKBc3sFq6W5NK2zVHA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69c85075288333d6c1f904bde0485c20_JaffaCakes118

Files

69c85075288333d6c1f904bde0485c20_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8afbf9211984274dc7a21b630ecae242

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
GetTickCount
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap

user32

MessageBoxA

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rrsrc
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE