456b04fa95cf3217bd7ec4a0e2ad0699_JaffaCakes118 | Triage

Sharing

General

Target

456b04fa95cf3217bd7ec4a0e2ad0699_JaffaCakes118
Size

56KB
MD5

456b04fa95cf3217bd7ec4a0e2ad0699
SHA1

160d71a1db348572a7de45a02566f4e91f138413
SHA256

141cdea44b978691b045dd6f8609c25f970026e073c853e1dd4eb174a476e8ce
SHA512

33395cc17431478b8a5afc8e249f70a8a14eba0c1d438938ea969d2102e5e8d366590a2da1168b7f2119ece83e319d8ceb04f15b3be02fbdc81eeb6188a56fe1
SSDEEP

384:/N9HcKu+o0GWvrWD5M3Czr2TLIgyjYehmN9qHOeCIhsp43Pfhf1C755SAFC:19HKbou/w2jC7mHAkR9Sy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
456b04fa95cf3217bd7ec4a0e2ad0699_JaffaCakes118

Files

456b04fa95cf3217bd7ec4a0e2ad0699_JaffaCakes118
.exe windows:4 windows x86 arch:x86

944f15cc6a14b0d6381c8099770e3c37

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetModuleFileNameA
GetModuleHandleA
GlobalAlloc
GlobalLock
WriteFile
ReadFile
CloseHandle
SetFilePointer
CreateFileA
GetFileType
GetStartupInfoA
GetStdHandle
GetCommandLineA
SetUnhandledExceptionFilter
ExitProcess

user32

MessageBoxA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 285KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 668B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 812B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ