aca43ac8656ea92bd0aeea7f518699ca_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aca43ac8656ea92bd0aeea7f518699ca_JaffaCakes118
Size

9KB
MD5

aca43ac8656ea92bd0aeea7f518699ca
SHA1

6ab60dd774275373f7e2505b434db703ded402b5
SHA256

c204b4da7df45589068047481d8bebf4c9eff40c190ee4d1fcfc44759cb466b8
SHA512

052b1f9ad6cde2bb16b1375e3d31a39247a9e6339cc1dcda42ee57e4ad7a1a61d0d6c216fba2099c62264936b3223f5430c6a7dfc8603f3d61f944d882a6dcc0
SSDEEP

48:OEPLlu5DslZvVagEPA6muBcBcJvKmJcYqDhw2hXP0P34Nb+Wb:nPZu5D+536Vm6Jv4ea6W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aca43ac8656ea92bd0aeea7f518699ca_JaffaCakes118

Files

aca43ac8656ea92bd0aeea7f518699ca_JaffaCakes118
.exe windows:1 windows x86 arch:x86

2a6647f9945b0bf188d414ef6348fca4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

user32

MessageBoxA

kernel32

ExitProcess
SuspendThread
GetModuleFileNameA
ReadProcessMemory
ResumeThread
GetCommandLineA
VirtualProtectEx
WriteProcessMemory
CreateProcessA
CloseHandle

Sections

CODE
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.RPPDATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE