390198b61d1d107ecdd5db0e55c3214d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

390198b61d1d107ecdd5db0e55c3214d_JaffaCakes118
Size

312KB
MD5

390198b61d1d107ecdd5db0e55c3214d
SHA1

f9d28ccdde4fe2fa16009f6de48d79fef5686d11
SHA256

6d8412df9f8259d6706b3bccb5cd526310e102feca5e8dbff3f45be8650dc9e1
SHA512

00363d4145d524c4c9ce3932eb1da559b1bcb016f9b851fb66cf7f9a9c40882c0a49ad9bb51b7ee908989554c4076cfc6be9279e274e8cf850be23068cc27429
SSDEEP

6144:iw3a6mGLrD/Ha7N9ymjR4yMFY9xQ4cJWeQ25K6T02ic2R4xLONbayBqBvu:iwq6FLrD/aR9yI+Y924eP7lT02MR4MJv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
390198b61d1d107ecdd5db0e55c3214d_JaffaCakes118

Files

390198b61d1d107ecdd5db0e55c3214d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

fdbfec85672f73d2a4d49635454936d4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
LoadLibraryA
ExitProcess

user32

MessageBoxA

Sections

.text
Size: 1KB - Virtual size: 676KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 301KB - Virtual size: 304KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.perplex
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ