f5ccf6a80d414bbe8c46fe6562e44ee8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f5ccf6a80d414bbe8c46fe6562e44ee8_JaffaCakes118
Size

120KB
MD5

f5ccf6a80d414bbe8c46fe6562e44ee8
SHA1

a417bfd28e74a0d0d9e42895a71e7130ae82a5d7
SHA256

51780c436fddddfa13da8b7665d3b1b1308c0c762aca695d009b24949b9a73c0
SHA512

8d2ce00a4076382abeecbf118061224db33eb242597d0f2af047d9b19d7e16fd67a0d474f4c5fb628ffffc938c52e2071fbbef09e3ef45af2004e594acdfb186
SSDEEP

3072:7ll8toDAYcvQPj7/WtJr73EKX1+6THdVqpe2iIXt:7lK6AYznEfUqXT/qpe2i8t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5ccf6a80d414bbe8c46fe6562e44ee8_JaffaCakes118

Files

f5ccf6a80d414bbe8c46fe6562e44ee8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

329f7ddb4e48e57a63acf5d0d05e7cb0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

TranslateMessage
GetMessageA
DispatchMessageA

kernel32

GetFileSize
VirtualLock
VirtualAlloc
ReadFile
CloseHandle
CreateFileA
ExitProcess
GetModuleFileNameA
GetModuleHandleA
GlobalAlloc

Sections

.text
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 414B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 117KB - Virtual size: 117KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE