081571ac307f4f2c8e5a8451e68e3b27_JaffaCakes118 | Triage

Sharing

General

Target

081571ac307f4f2c8e5a8451e68e3b27_JaffaCakes118
Size

7KB
MD5

081571ac307f4f2c8e5a8451e68e3b27
SHA1

a106d942d0af28c6bdbf635ca7fa5aae02b15838
SHA256

6d515611eacef7f9ab308d22c68871a65ef3bed67c3efd935ddf857bb32b7cb5
SHA512

cfc8bd98fed55aeb0935526a266ace82a182cd134929e1119f22f7096dcebfe22d964280222b26e493fd878ef38c49172a622f7be5574a25a308755eda688338
SSDEEP

24:7pfsEk+Om5Y63ZZ+aXdcCkEF2vIyvIs+i4BsRvkc5X3aUlesI2pG+H3:9kO+6JZ+31ERbs+i4Bwvke68esI2b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
081571ac307f4f2c8e5a8451e68e3b27_JaffaCakes118

Files

081571ac307f4f2c8e5a8451e68e3b27_JaffaCakes118
.exe windows:1 windows x86 arch:x86

0e4021554a373d5cb9215de2f75bd91d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadProcessMemory
WriteProcessMemory
TerminateProcess
ExitProcess
GetStartupInfoA
CreateProcessA
GetCommandLineA
GetCurrentProcess
ResumeThread
GetThreadContext

user32

MessageBoxA

Sections

code
Size: 322B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

data
Size: 220B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

IMPORTS
Size: 66B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

imports
Size: 392B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

relocs
Size: 114B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

resource
Size: 4KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE