0fb5a0e7a1d5cae9f9a2bb39e977eb52_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0fb5a0e7a1d5cae9f9a2bb39e977eb52_JaffaCakes118
Size

4KB
MD5

0fb5a0e7a1d5cae9f9a2bb39e977eb52
SHA1

aebbfd8deb671fa16f62fc42f43e19459fc63039
SHA256

1ed192863230256ad496370ff648a722b9de3e4f344b0df4b7b0fd5dd8a41676
SHA512

7b36c819353358933dff8c705bad93512bf0862a9be474958694ab83d30ab54263eba64bc7baefcbba4b504ea757216bee819450097b8e869cf5b49e5a72ad5a
SSDEEP

96:ZbQQfSfOWKzYue6xJqUfQxzFul84qAC/G:RfwOHWTUfHW4qZG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0fb5a0e7a1d5cae9f9a2bb39e977eb52_JaffaCakes118

Files

0fb5a0e7a1d5cae9f9a2bb39e977eb52_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b5a7e02ba7207268c0918b12dd4e61c7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
HeapAlloc
GlobalAddAtomA
QueryPerformanceCounter
HeapFree
GetTickCount
GetProcessHeap
GlobalFindAtomA
VirtualProtect

user32

MessageBoxA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1000KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ