JaffaCakes118_50625b71eb47fa32b861051865a8f21b | Triage

Sharing

General

Target

JaffaCakes118_50625b71eb47fa32b861051865a8f21b
Size

1.1MB
MD5

50625b71eb47fa32b861051865a8f21b
SHA1

4c95436709a662e0ea21ead0d4281d6c7d062276
SHA256

42d4754659ec0ae58db727fe7982f1aced43b717cad7abc9486bce6662137255
SHA512

b5d01ea77a82cf27768f7ffbb94d5beca5894fc6e6adbdba4da45239f5ea4684da5850ca5568124849b6541184e04a438251fc504fda2f92cd045e37a0fb31d2
SSDEEP

24576:MYayM9ZUUYfTlavxTdOd/8hkDGhmkmf6eR/9eK5J/fTJiw9m6CoWAcuT:MyrlIedUhE+mkmf6eR4K5J/fTJiw9mYr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_50625b71eb47fa32b861051865a8f21b

Files

JaffaCakes118_50625b71eb47fa32b861051865a8f21b
.exe windows:5 windows x86 arch:x86

536b4c8e2126789331746f33b55b717a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress

user32

MessageBoxA

msvcrt

malloc

iphlpapi

GetAdaptersInfo

psapi

GetMappedFileNameW

advapi32

RegOpenKeyExA

Sections

.text
Size: 186KB - Virtual size: 280KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 906KB - Virtual size: 908KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata
.rsrc/GROUP_ICON/105
.rsrc/ICON/1.ico
.rsrc/ICON/2.ico
.rsrc/ICON/3.ico
.rsrc/ICON/4.ico
.rsrc/ICON/5.ico
.rsrc/ICON/6.ico
.rsrc/ICON/7.ico
.rsrc/ICON/8.ico
.rsrc/ICON/9.ico
.rsrc/MANIFEST/1
.xml
.rsrc/version.txt
.sedata
.text