2551c992149f3f2d8bb64cacc14d89e4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2551c992149f3f2d8bb64cacc14d89e4_JaffaCakes118
Size

282KB
MD5

2551c992149f3f2d8bb64cacc14d89e4
SHA1

e476d13e638b29e2fb9ded3adc0759af9757bcb5
SHA256

e9fc8fd1656e60e573baa70e85ed4122ebb74f4447c3506296c97d0812fc7a64
SHA512

3b235135df71e7293c5589685790e3c856bb304d9df944101047232ef2621c860229f18deee6e1b3be0fa7884f8c79b57f8dc11bcd4d00c4b4c25a49b31062d8
SSDEEP

6144:oG3WMCBo2eEdXPu2ifJgy7QB+gcD2kl8M7mbmbcUu:1mMCzeaPHiB7EzWP7Cmy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2551c992149f3f2d8bb64cacc14d89e4_JaffaCakes118

Files

2551c992149f3f2d8bb64cacc14d89e4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

07da727eb34f5536b42d61a4dc9730e6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

RtlCopyLuid

user32

MessageBoxA
DialogBoxParamA
EndDialog

kernel32

ExitProcess
GetCommandLineA
CreateThread
ExitThread

Sections

.text
Size: 160KB - Virtual size: 159KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 119KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ