ade44b414c437dd5ebee5e774de8f4c8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ade44b414c437dd5ebee5e774de8f4c8_JaffaCakes118
Size

63KB
MD5

ade44b414c437dd5ebee5e774de8f4c8
SHA1

066a3dd8bc67272ac71fc6bb9b6abb0c18dda762
SHA256

beaac8c83baaa8acfdb04a569aedd1cc10800836715a1424d9d26d4a8780f45f
SHA512

d7c45dcc6fba7a4a289a7099a87927916aaf5e2782d32e29bca28f8bb9b1ce4145249d95b12d53e07953493e9f49b23b1a93fe65689116ccfe3294080c5e877b
SSDEEP

1536:PUfiw+3mC2be+SeYFFrkL53vQLJ1QU0tqlVII:86w+WCejSeYFFrkL5AJ1QLqfII

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ade44b414c437dd5ebee5e774de8f4c8_JaffaCakes118

Files

ade44b414c437dd5ebee5e774de8f4c8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d7c3c9382b43e5478a56ea7d42452cdb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap

user32

MessageBoxA

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

saint
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE