d5a592570fe8b7814ee79fa69e0ece8e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d5a592570fe8b7814ee79fa69e0ece8e_JaffaCakes118
Size

239KB
MD5

d5a592570fe8b7814ee79fa69e0ece8e
SHA1

6436e895768298fad246b46a42020a83e457506f
SHA256

5797367ff3b18af1f55da381c4de4b4e9b0736c66c9d65b3d52a3498ee4ba114
SHA512

21b40ed3b9387208ba335296d99e0a29496e2ea3e655ee7f4c7eccd8ecf08d9f704cbe292aace9803896a0c33829b4a7d1cebcf0d464be997bbd0b71f8fc188c
SSDEEP

6144:h4rpm0BxlD0KblCMvRpGiq/wHMq/gsbmQ90dQcQHSag2:h4dHlDnpGiq/UMwp8QoI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5a592570fe8b7814ee79fa69e0ece8e_JaffaCakes118

Files

d5a592570fe8b7814ee79fa69e0ece8e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8afbf9211984274dc7a21b630ecae242

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetProcAddress
GetModuleHandleA
GetTickCount
HeapAlloc
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcessHeap

user32

MessageBoxA

Sections

.scpack
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ