c925e8f0cbdae8b0bb3be43511d54857_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c925e8f0cbdae8b0bb3be43511d54857_JaffaCakes118
Size

555KB
MD5

c925e8f0cbdae8b0bb3be43511d54857
SHA1

dc4cc77e03dc7509577277a11ff267b7608dfed3
SHA256

2da9d4ce649bb61c2b529625818edbb85273c317301a130fc6669faf7bb6a757
SHA512

e3df3719532e880ca42069e695c5d2dadd74c14f65aa28302435a0e9a9a1389b1809b80ca5c502711d20f4493aafa2d10a3c1419e7672541bbaef3ca5116d09c
SSDEEP

12288:CLxIgHiihD0pU0luzEvO4cniWmPFw7gbaEE7GlyS/krmY52v1pc6U:CL+uopTluN4aiM7UJ/kMv89

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c925e8f0cbdae8b0bb3be43511d54857_JaffaCakes118

Files

c925e8f0cbdae8b0bb3be43511d54857_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3c35ed3841472dd428cc58fda2ec78f3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

GetProcAddress
Sleep
SetFilePointer
CloseHandle
CreateFileA
ExitProcess
GetModuleHandleA
ReadFile

winmm

timeSetEvent
timeKillEvent

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 392B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ