b929e695ac42a7c1acacaccebaf62ce3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b929e695ac42a7c1acacaccebaf62ce3_JaffaCakes118
Size

39KB
MD5

b929e695ac42a7c1acacaccebaf62ce3
SHA1

8b78e9ffdad238e71cca8133706c59bef65cdbdf
SHA256

0280840b46e8acdaab6e18dae773282ecae210ba5f50fb7e413024dd2998921c
SHA512

c2e6713b033613a0b32c35fcbe20a70069da307dc552d2931af27d04066853c2a6beb69b1b01b9c74f066751cec97c1d2afdfb245226394daee9d77ed9bd554a
SSDEEP

768:xnGPrLmIdPu0ZVQ9u9qI2AbS5nzPzVantS8YzXBV:ZGPrLmKW0jh9qvKqLZYUFrz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b929e695ac42a7c1acacaccebaf62ce3_JaffaCakes118

Files

b929e695ac42a7c1acacaccebaf62ce3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d7c3c9382b43e5478a56ea7d42452cdb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_SYSTEM

Imports

kernel32

GetProcAddress
GetModuleHandleA
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap

user32

MessageBoxA

Sections

.text
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ