c25fb78d1e2bde9893967c94855b538e_JaffaCakes118 | Triage

Sharing

General

Target

c25fb78d1e2bde9893967c94855b538e_JaffaCakes118
Size

108KB
MD5

c25fb78d1e2bde9893967c94855b538e
SHA1

f5f75d73a2959eb90317dbf4db26f7ae7b57c97e
SHA256

7aac12a1f8d2dcd7da42fecd31f9d49577c8b2fc2f8292d75536e660c70f4d3e
SHA512

a45c254ab5e35727aba5100259e5a11675ca01b2f9cd69e0687baf62918aa308d72d9ed65c8d794a2c4f0286910e432f059ffafb14f94fe5202d20c64d1b3dc7
SSDEEP

3072:Dnr4okYXwS9rbsTZzs4Ns6RjKAyxPUoU2:D11r2A4eYjK/Uo3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c25fb78d1e2bde9893967c94855b538e_JaffaCakes118

Files

c25fb78d1e2bde9893967c94855b538e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5f85b66ea81c0101c1aa18f2727704c1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
CopyFileA
ExitThread
CreateFileA
WriteFile
CloseHandle
GetFileSize
CloseHandle

user32

MessageBoxA
MessageBoxW
MessageBeep
MessageBoxExW
MessageBoxExA

Sections

.text
Size: 75KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE