6ab0ad805b1bc28d2d3a26e78807d63e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6ab0ad805b1bc28d2d3a26e78807d63e_JaffaCakes118
Size

312KB
MD5

6ab0ad805b1bc28d2d3a26e78807d63e
SHA1

c016b7035668df3be5528f01962af189f3c88ea1
SHA256

2ef905222b99c3dad5dd6eead57f4610d6a3cb83927c39420bc38ae6b99265ed
SHA512

42dd504894effc09f467b9f71a6b725bb5c871a26e1a92b02a17b52a64a040823c6661b07a868bfac7ad01eb9de1131106dc3851f1ae64ad617468b60edb3e09
SSDEEP

6144:aGFFfT5P69iy7LLoJ30B+KPn7xpGiBE+ueJKy/WCKQRnpjgH:aGFvC9hLLkEB+KTPha+ueV/WCJnVs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6ab0ad805b1bc28d2d3a26e78807d63e_JaffaCakes118

Files

6ab0ad805b1bc28d2d3a26e78807d63e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

aa1ca832e28e2c6a63685365c58b52b5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
LoadModule

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 273KB - Virtual size: 273KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ