d156d06dd09112c1448cc847cc58e591_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d156d06dd09112c1448cc847cc58e591_JaffaCakes118
Size

58KB
MD5

d156d06dd09112c1448cc847cc58e591
SHA1

e988a2c5013e18493c40b64ebdc46fccab17faa0
SHA256

1543fe9f1aa79ee42a707db30369f563b25bbb575244012727926fc13d3faf9b
SHA512

508693a518e0f4a350762bd69ba2a18ac7776abbda476d1f0b3d99ecf33f8b217c6de2b33363f34b34d90464ebee2d44c905986cb75d9ae915e9ad3266e38e55
SSDEEP

1536:eJ2+5GTybRXMqXGASVGMlQM+y9jIt+kc:eo+GEfGz0MlQMdI1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d156d06dd09112c1448cc847cc58e591_JaffaCakes118

Files

d156d06dd09112c1448cc847cc58e591_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a9be73de774c98cbebb0769c44d81360

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessA
DeleteFileW
DeleteFileA
FindAtomA

user32

CreateIcon
GetMenu
EndDialog

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 46B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 287B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ