dfced906aa61001733a25498827841c3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dfced906aa61001733a25498827841c3_JaffaCakes118
Size

1.7MB
MD5

dfced906aa61001733a25498827841c3
SHA1

2591f1d60fe59f20f65514510e495c99940a7a80
SHA256

9fe2a9bba9b804aff4ec99ead11c5997a6b75f11416a6bdbcdbf196c55761573
SHA512

4b1f40cd6b3ddd4e89b0f3d8b65d0693cec5448dd3726ab4b7d5577a425015d2fe8de5dd1d53a644d140a9447de4f615dd76d11326e6203a19b2e745bf80728a
SSDEEP

24576:H4rfr3NAAJW7nCIp2Tg1LpMxzY0TeR8YKpGgTlsqE9FOp3V:HefrI7CpTg1L2xzY0TeRlgTs9FOpF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dfced906aa61001733a25498827841c3_JaffaCakes118

Files

dfced906aa61001733a25498827841c3_JaffaCakes118
.exe windows:5 windows x86 arch:x86

aadf5c8667fe05f652d8f2e502e2b9d7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

GetModuleHandleA
GetProcAddress

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 399KB - Virtual size: 399KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ