b5c559ea7085570eee24511e9382ec14_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b5c559ea7085570eee24511e9382ec14_JaffaCakes118
Size

30KB
MD5

b5c559ea7085570eee24511e9382ec14
SHA1

0601545b198bb6b120374c8bf397cb75d23fcaca
SHA256

e1b49f111701cb5bd1f9f82e830491f08b16dc3bdc6f9286356be9bcf5bd7f4f
SHA512

c6537643736ef0ff38be05a0a58a301839b145785fd792ed2d04ad6d38e38956d37bd975f30470d0fdc3a245752cdeb38eeb71b045c1b16a30ddf40c56971004
SSDEEP

768:0+KjrnkdzCcjq+kaDpuhK2EWaf8jVIMumhBoBhY:8XkdNW+kaDps/EV0oQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b5c559ea7085570eee24511e9382ec14_JaffaCakes118

Files

b5c559ea7085570eee24511e9382ec14_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7f2e49b54cf3cc086ecfd6567ba729e1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetLastError
GetModuleHandleA
GetModuleHandleExA
GetProcAddress
LoadLibraryA
Sleep
VirtualAlloc

user32

MessageBoxA
SetLastErrorEx

Sections

.text
Size: 768B - Virtual size: 548B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 344B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 256B - Virtual size: 62B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE