dffa0cfc34007cf7531ce2510ef51eb5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dffa0cfc34007cf7531ce2510ef51eb5_JaffaCakes118
Size

107KB
MD5

dffa0cfc34007cf7531ce2510ef51eb5
SHA1

f3043af4c2170af5d0fa948f89772216f3a1f914
SHA256

a23eca1caf361d6aeab75bff11e750544ee83355338505495ea9b6cdd5a52f2e
SHA512

e0e0dee516803b60d14b06c0fc0959a3b59b52a41a338275147063677d9d3c73bb2006838bce436ca9f2e10ba5a5801a68ab388f67c01d7d7c1559dd3b332843
SSDEEP

3072:Mbe2EF6On0JLyiBQZ9SL4LEfBhBt3nUWT/:MPL3+ZDLIBhBt3hb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dffa0cfc34007cf7531ce2510ef51eb5_JaffaCakes118

Files

dffa0cfc34007cf7531ce2510ef51eb5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

aa1ca832e28e2c6a63685365c58b52b5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadModule

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 228KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ