6fc3a18e1bab1d9b3e203c028b2f9a7d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6fc3a18e1bab1d9b3e203c028b2f9a7d_JaffaCakes118
Size

122KB
MD5

6fc3a18e1bab1d9b3e203c028b2f9a7d
SHA1

f30ad28dc8565000cda05ed3e597172b448ee062
SHA256

7f443f4051efb4a120dda086efaa93f1da2cebbdb2497a75427216d1f314a9ae
SHA512

d78082a0134a77b59478bc8a7ec55f278cbbe687e7525b69cda822222fa5cea7f794c5c1fef8bc664cfae0f96bb5016a50b3ff595ec0684b8d8574ba3638c4fc
SSDEEP

3072:Lt8pFuXfXBn7dNELKy/jJgoSkHZqybCcpS4gL:2pc9RcpFckHTbnpjgL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6fc3a18e1bab1d9b3e203c028b2f9a7d_JaffaCakes118

Files

6fc3a18e1bab1d9b3e203c028b2f9a7d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

aa1ca832e28e2c6a63685365c58b52b5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
LoadModule

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 272KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 89KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 368B - Virtual size: 368B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ