a61874b0497e872e6eef2a4b6ee6f0a5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a61874b0497e872e6eef2a4b6ee6f0a5_JaffaCakes118
Size

2.4MB
MD5

a61874b0497e872e6eef2a4b6ee6f0a5
SHA1

7b0d66af510d70994f8c22bc77702c5cc6550c43
SHA256

ac53d3032fddfdebdab837209834906e503cc77b8a1c7f8cc8e888ddae604797
SHA512

5e305b0f0752ac7d2dbbda672152df0b1a153408cbcbe3239c6b6c7a046581465c532a5eebd0654cac4df55a491ffa81cd4036e15c82f1dd6027ee0a3e23e563
SSDEEP

49152:y1eYG6wFYSucLNWPPIN6mUDyVrJL4EGGNSVQk8GbUUpux:ytifiiUDyVWLqSXUUpux

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a61874b0497e872e6eef2a4b6ee6f0a5_JaffaCakes118

Files

a61874b0497e872e6eef2a4b6ee6f0a5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1030bb724e3449ab9fda6fd6998986c0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

TranslateMessage
ShowWindow
GetWindowLongA
GetMessageA
DispatchMessageA
CreateWindowExA

kernel32

CloseHandle
ReadFile
GetModuleHandleA
GetFileSize
ExitProcess
CreateFileA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 390B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ