160a5a0c1bd4211e5819826e32c1c2b0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

160a5a0c1bd4211e5819826e32c1c2b0_JaffaCakes118
Size

92KB
MD5

160a5a0c1bd4211e5819826e32c1c2b0
SHA1

601100f5307079de9d076719e1696b73c7d804e6
SHA256

af39e3b2a16e64a484953091bccdc3900082e82cca9ab848db1c67532cd610fa
SHA512

b0ec00ec9525bf037e31bc8673efa54f79bd8facc50712b1fb3e41a79fe880bb281d810b23eefca9f24fbf2c9b5588dd65b9a92c5dc3018bd964d1413b7cadbc
SSDEEP

1536:oD/ih/paGSbhDZUvoRsD/CSVqq99I08UAmWC1+RPNOIh0C+VfrkbQ2rMMnLn:uwRaFDZUvo4Bqq/I0WbCwwtkQcM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
160a5a0c1bd4211e5819826e32c1c2b0_JaffaCakes118

Files

160a5a0c1bd4211e5819826e32c1c2b0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fdbfec85672f73d2a4d49635454936d4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
LoadLibraryA
ExitProcess

user32

MessageBoxA

Sections

.text
Size: 1KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 81KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.perplex
Size: 1KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ