fa023618720519afe4f3ee5f20f02bc8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fa023618720519afe4f3ee5f20f02bc8_JaffaCakes118
Size

104KB
MD5

fa023618720519afe4f3ee5f20f02bc8
SHA1

b6b4679172524a6d4e78d796f8f960fe82d1ea19
SHA256

45cbfb322dacb57bef4f7ee6c82b289c342a2630cab30571591c25f9a8bee4b6
SHA512

3bb191af0e41c57fbe6ddcfdd50b8565f146f407bd266cd1b5e8799fc4bbb1f63fa3bfa027184d27979a74e4f8092567f3b8dba40906a80655ff911461c2e301
SSDEEP

1536:fltXkXo8UTaS2aw/zM1dhx6oxkgn+aC8q6lNMK2+ZDBzRHt1RQS2A:XioFaSJw/Y1dhx6oxtVlNrZDnRQS9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fa023618720519afe4f3ee5f20f02bc8_JaffaCakes118

Files

fa023618720519afe4f3ee5f20f02bc8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

482ea7b49481ccb9a2f155f65a5d858f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
GetTickCount
HeapAlloc
GetCommandLineA
GetStartupInfoA
GetCommandLineA
GetProcessHeap

user32

MessageBoxA

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.yrsrc
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE