a1f6a18b4ea07b8a49b9e45d7c6a0776_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a1f6a18b4ea07b8a49b9e45d7c6a0776_JaffaCakes118
Size

100KB
MD5

a1f6a18b4ea07b8a49b9e45d7c6a0776
SHA1

2401af91a8f5d66a9257bbfd90a19f67eac3bab7
SHA256

7bcbb18f271efdc9c1f6fcd2a3829970113b64192294f98f11f5c3be3fbc2f0a
SHA512

4abe36375effa902b6d5fbe3ed0a04ef58056ce66915e37cc1d2ade03b15cc81cb48609fa8bae6eb366f6923306b99e14364623567222093097ed38cd45a58b7
SSDEEP

3072:l8mfBNOgMbR9ces+5nbDUWHsLY/pnPCTBfN2JHZWl:l8m7OtbR9cMBlMLOVCra

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1f6a18b4ea07b8a49b9e45d7c6a0776_JaffaCakes118

Files

a1f6a18b4ea07b8a49b9e45d7c6a0776_JaffaCakes118
.exe windows:1 windows x86 arch:x86

ccbbbe8772bd82ebbfcf6a68dd3430ca

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetModuleHandleA
GetProcAddress
GetFileSize
CloseHandle
SetFileAttributesA
ExitProcess
SetFilePointer
WriteFile
CreateFileA

shell32

ShellExecuteA

user32

MessageBoxA
LoadIconA
EndDialog
SendMessageA
DialogBoxParamA

Sections

CODE
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 95KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ