f5654ae77d0844026d1bdc830b551de8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f5654ae77d0844026d1bdc830b551de8_JaffaCakes118
Size

92KB
MD5

f5654ae77d0844026d1bdc830b551de8
SHA1

eadc027bcd49e8fb27c373ba1a7f594eda7d59c8
SHA256

37dc3815e8cd009917df53eb8741f209ce24aebcb0a98d559195521f5ab15cf5
SHA512

3ed7bb0e77fb92657796ea6368b138a0de93d3049947d68fb27f319d08d3c64d046ee9051766187b2aaaf165351c58160552bc752515cdb3990543de7be0240a
SSDEEP

1536:TKRhFWW9/cAGY6mQNFlHqFMUBcJMgF2WlnZ9CwZH4tKKHhppfb9O47Rzk+yF7AvX:TKRhx9/NPSq6U2JMgFdBH4ZfNk+ypAvX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5654ae77d0844026d1bdc830b551de8_JaffaCakes118

Files

f5654ae77d0844026d1bdc830b551de8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f336b8c11383a2ccc0d65db2c354bee4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
ExitThread
GetModuleHandleA

user32

GetClassNameA
GetDesktopWindow
MessageBoxA

Sections

.text
Size: 1024B - Virtual size: 561B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 89KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE