0ba6e51cb43888e71c95443a49384240_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ba6e51cb43888e71c95443a49384240_JaffaCakes118
Size

59KB
MD5

0ba6e51cb43888e71c95443a49384240
SHA1

37fa4f8b517415d889cf08841df609cd1ccf05cf
SHA256

0a51afad07fa70c199b0b9e0dd0360d01b60a3fea244022021e91233ad0469b3
SHA512

d6bba694e51dbe2ce34650a788ce8c088cbe946a6c51e6ecaaed5d29e49016761d042334a5dd8a0e59df15ea2f8834c8208a8bf3e552e5fc3b7014b6f75cc843
SSDEEP

1536:8wGol5jerfkEbezp2Hu/44nULQA0mXZlLLPjIDo9:8jocME6zpT/Qsk9EM9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ba6e51cb43888e71c95443a49384240_JaffaCakes118

Files

0ba6e51cb43888e71c95443a49384240_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3c35ed3841472dd428cc58fda2ec78f3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

GetProcAddress
Sleep
SetFilePointer
CloseHandle
CreateFileA
ExitProcess
GetModuleHandleA
ReadFile

winmm

timeSetEvent
timeKillEvent

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 392B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ