107196c034de80e0a10fde36f06c5581_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

107196c034de80e0a10fde36f06c5581_JaffaCakes118
Size

46KB
MD5

107196c034de80e0a10fde36f06c5581
SHA1

a50af130269d5f88d453a33d71ad9386f9feabef
SHA256

9d8464a31623d0be8f3a5da5f9fc4a22389fd375129f99df12009f16d40f0c17
SHA512

0e5466a0ce9aa929c7580c9fc5b79c72971103179f391d6f272a6e19b58a6f986d48bfe866a6afaa9fe044d00d4cc93c9a93233c79df07e0960fb63b2bd60807
SSDEEP

384:x5ueNNOFMn2OFZ0KxVOFjQBEOFRtMZmNKDj3kPdT9l0Zv74sH+VroaT2OP8Z9fn:RNkFMn9FZb2FjsFRt5GZvcxFf2X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
107196c034de80e0a10fde36f06c5581_JaffaCakes118

Files

107196c034de80e0a10fde36f06c5581_JaffaCakes118
.exe windows:4 windows x86 arch:x86

81ac5116a473681fb8982eeb6f99783f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

GetModuleHandleA
WriteProcessMemory
Sleep
CreateProcessA
ExitProcess
ReadProcessMemory
ResumeThread

Sections

.text
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 298B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ