09c2a584bb486dabcc7b3fa9a60467b6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

09c2a584bb486dabcc7b3fa9a60467b6_JaffaCakes118
Size

214KB
MD5

09c2a584bb486dabcc7b3fa9a60467b6
SHA1

0188b36a7cbafcb2bbe250102c19d1f9e37b22bb
SHA256

ed7b247c639c648b626ad23751fe7cd34f10eb18dc16b6425f9e70e3e68edc61
SHA512

5afb233518a9be236b50facd1d6828c0ba161421f3c30b664235a391dd852b9d4583f259d9cf0fd0880c3ad1404ed267454cbbe1c6b63a4a89847775fa497dcb
SSDEEP

6144:Decj9p0pWY1On2AHkkqzZDBl1SwADAxDY:ycj9p0nuHmrlIhDAxDY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
09c2a584bb486dabcc7b3fa9a60467b6_JaffaCakes118

Files

09c2a584bb486dabcc7b3fa9a60467b6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

95aa5f98dd84693544353d2012e4ccf7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
ExitProcess
SizeofResource
LoadResource
FindResourceA

user32

EndDialog
DialogBoxParamA
MessageBoxA

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 368B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 205KB - Virtual size: 204KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ