JaffaCakes118_569a6624ff3a8485a13a768e86dab123 | Triage

Sharing

General

Target

JaffaCakes118_569a6624ff3a8485a13a768e86dab123
Size

485KB
MD5

569a6624ff3a8485a13a768e86dab123
SHA1

a67c5e095c2414e1286d8a9de8a1b7ba6e2dd960
SHA256

7ec4f599fb2656812e30116cf0e4f1a69157c57bd3731d9da2601fd64e5306d8
SHA512

0e3e0713eff27d81ffad598a748f907f792ee3aa243a3d60b923cc6e7e9bd4619ffb8bb003e5cb139633034d7299b9dc90fe80e8d0431dd42d2c33df188efa1d
SSDEEP

12288:5eJ8BYYtwbb9n5wC19sQXc0QYvZlJshMd/HOFX:fmYtU9+fUzdsu5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_569a6624ff3a8485a13a768e86dab123

Files

JaffaCakes118_569a6624ff3a8485a13a768e86dab123
.exe windows:5 windows x86 arch:x86

e272069d3f9f3c33841e1ceb2ad36e94

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapFree
GetModuleFileNameA
HeapAlloc
GetProcessHeap
SetUnhandledExceptionFilter
UnhandledExceptionFilter
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
HeapReAlloc
TerminateProcess
GetCurrentProcess
IsDebuggerPresent

user32

MessageBoxA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 824B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

VTApJArE
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 467KB - Virtual size: 467KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ