b73abe57acfbd8166e3ae385ea640004_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b73abe57acfbd8166e3ae385ea640004_JaffaCakes118
Size

210KB
MD5

b73abe57acfbd8166e3ae385ea640004
SHA1

f5468ac988737e8a3d44715cabae5218f0e41e56
SHA256

2ce07b0b48523d9c34a79a20c7e41578fa2552e6a8cf027fd7fe20b83ea4532a
SHA512

04ed7b677c4c2847e68c6f849072fb7b585bed6b675215a9903eb39a98eb3a57ff232e8fd00ca307dd3f0cc251174c810580bc472775013c89dfa95f4362e328
SSDEEP

6144:WlK32nCslnSZ8gRynNF8Lrx4BayIytca1y:WlK4dgMoWa7ytD1y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b73abe57acfbd8166e3ae385ea640004_JaffaCakes118

Files

b73abe57acfbd8166e3ae385ea640004_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8afbf9211984274dc7a21b630ecae242

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetProcAddress
GetModuleHandleA
GetTickCount
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap

user32

MessageBoxA

Sections

.scpack
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ