a6601e016c6cefad8b84ac47fa0aee32_JaffaCakes118 | Triage

Sharing

General

Target

a6601e016c6cefad8b84ac47fa0aee32_JaffaCakes118
Size

37KB
MD5

a6601e016c6cefad8b84ac47fa0aee32
SHA1

db1e648dc3bf52b279d7e6d53f85a0af621e25ce
SHA256

142bc35d799a3dabc4dd675a63f88fbad19b4cdad97754fcf9b2d04f1c4dd669
SHA512

a8b21f96ba3cc3c2ae9365b637fc27ab9baa3363254ab20d546abbfe243408c9c3f7731db55b5fdc78eb0558035bfe262decef556eeaf14360ab849d6f9b17cb
SSDEEP

768:edIZ/alwuAknNWuCMQpb0ruFm1YqTrmHwbLyMyJ:edILlknNU4rOobbLynJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a6601e016c6cefad8b84ac47fa0aee32_JaffaCakes118

Files

a6601e016c6cefad8b84ac47fa0aee32_JaffaCakes118
.exe windows:4 windows x86 arch:x86

23f6e4ee8da20bb24cb1f94800599914

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA

user32

FlashWindow
SetTimer
wsprintfA
MessageBoxA

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 236B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ