57592106b6785e015f9500f67654dd58_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

57592106b6785e015f9500f67654dd58_JaffaCakes118
Size

257KB
MD5

57592106b6785e015f9500f67654dd58
SHA1

68c20de626b2f37fd9d4f67a520383234ae18529
SHA256

0afeacc20bbce581ef26d847e5afd2c26c677aca502e66bdc7727f3d26b30d62
SHA512

58a4bd10a04c4dd699642816c93cea2445902c1d80adf2d7bf1b25e85f36bda3919235720d1d4d43fb7d307c1f535d10a25d6729852590c38538b23e9622b6c2
SSDEEP

6144:qedSSqAAwKPGz3xSh4HfedSSqAAwKPGz3xSh4H:qepKPGjoEepKPGjo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
57592106b6785e015f9500f67654dd58_JaffaCakes118

Files

57592106b6785e015f9500f67654dd58_JaffaCakes118
.exe windows:5 windows x86 arch:x86

ef3a0c6b6b4f845864cd9e2b781d9c93

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
AddAtomA
ExitProcess
ReadFile
SetErrorMode
GetProcAddress
GetModuleHandleA
HeapReAlloc
HeapAlloc
GetCommandLineA
GetProcessHeap

user32

MessageBoxA

Sections

.text2
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 386B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ