01c3c98157d3718ef0fac0f9c6d62634_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

01c3c98157d3718ef0fac0f9c6d62634_JaffaCakes118
Size

831KB
MD5

01c3c98157d3718ef0fac0f9c6d62634
SHA1

ad87c1e428341c0c3df46694986ca4f4db3fdcc2
SHA256

b14f14ba899640cf6e0a9f7d2a4611f8fbbcbdad0f428e282e38772716aab715
SHA512

8cf89de4d92dfb1b907f6b6598d5befbc8d9ecc4e0452d3ea3675f55aabc966ad1baf6d6b0f6ce93cce52b830403efbe41571635833bba821d4fcebd8ea503d8
SSDEEP

12288:bxx4f1gMJPDu6hNo5DQ79pSTTpsWpGbnZCtRmtW6y/lf2uO3yrS2:bxx4NgWDhroyxOpsWyQtR96uYuO3yr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01c3c98157d3718ef0fac0f9c6d62634_JaffaCakes118

Files

01c3c98157d3718ef0fac0f9c6d62634_JaffaCakes118
.exe .js windows:1 windows x86 arch:x86 polyglot

e5304516e3d13e73c8c0b902b55ce0e3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
ExitProcess
Sleep
GetSystemInfo

user32

MessageBoxA

Sections

CODE
Size: 570KB - Virtual size: 572KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 116KB - Virtual size: 2.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 75KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

OGRE2.01
Size: 68KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE