JaffaCakes118_1b4fcbd5822e1f442bbe0210243a7007 | Triage

Sharing

General

Target

JaffaCakes118_1b4fcbd5822e1f442bbe0210243a7007
Size

486KB
MD5

1b4fcbd5822e1f442bbe0210243a7007
SHA1

b10d1d6bc559d92b9d021db4c3c2c02477ae12e5
SHA256

2140696357d2905f43e85e58ff1b71e51fc5d17991110f296c140c51b0bbbb64
SHA512

3c7626b46b29c28897cab0190419d33150868e9f41c75f4558a84677d0155b47052538ab30b8dbfaf8c6de758aa9080c5b88ac247e02261a21986d9aa28216cb
SSDEEP

12288:bDTpfY8VEZlmSmtrr4QLAQKVJvf+Mh0DxTAo5D7SdZJ8MXsDVa5nC:Tpg8VMlmbDLcVJvf+Q05Ao6L7Ug5nC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_1b4fcbd5822e1f442bbe0210243a7007

Files

JaffaCakes118_1b4fcbd5822e1f442bbe0210243a7007
.exe windows:6 windows x86 arch:x86

63ac7c2799723925dd310860701c20d0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA

user32

MessageBoxA

advapi32

GetUserNameA

comctl32

PropertySheet

Sections

.bss
Size: - Virtual size: 236KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.CRT
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 134KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 350KB - Virtual size: 356KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE