69face34f5a80030c41138ea047c0971_JaffaCakes118 | Triage

Sharing

General

Target

69face34f5a80030c41138ea047c0971_JaffaCakes118
Size

56KB
MD5

69face34f5a80030c41138ea047c0971
SHA1

af6ca02c072846b663b9002e580d1ffbef1ed496
SHA256

a3c9a566985b7995ebffcb1a640af8ef1d0f88a7b55a3235163cea05319491bd
SHA512

2196378bad8fab2255bdebfec49df45ac7e9bf58e1e0bfb4c6afb1d40af125075d8dfe758eb30b1a9dcb36e90ad2d2030d1d9bf565cc179b80b2fa979fcc70c2
SSDEEP

1536:wR65VcCpFv+aqGsjREmM8eTQQWnqyK4bgmt1wtls8hbk:ws5umFv+aHsi6qyP1Asv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69face34f5a80030c41138ea047c0971_JaffaCakes118

Files

69face34f5a80030c41138ea047c0971_JaffaCakes118
.exe windows:1 windows x86 arch:x86

8da8a516c36fb81332526aa636a6af4c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetTickCount
GetCommandLineA
HeapAlloc
GetProcessHeap
ExitProcess

user32

MessageBoxA

Sections

.code
Size: 512B - Virtual size: 137B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.date
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 322B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ