f14fcfe5f2afa87aa89bc73b98be1a03_JaffaCakes118 | Triage

Sharing

General

Target

f14fcfe5f2afa87aa89bc73b98be1a03_JaffaCakes118
Size

122KB
MD5

f14fcfe5f2afa87aa89bc73b98be1a03
SHA1

042055d4fd06183f11001de60804f2bad6513bbb
SHA256

b30ef86d8019889638d1f3a644094386eff1bc55a3cac0360450f494556f732b
SHA512

83ac602e2221e0912790ad6c71f9d1d1212bc3f3480673e92dbb3184dcc39beeb5556ac9bfdce77e24da2d8798de1deb9219e3803a3b69be5a1c2b2ef38be607
SSDEEP

1536:OqrK6EtV7HgOJn4JM23iyt5oIvH37jIqt4sckjcn3f+Fk/XCE14bdEIQEzUxAmiy:307AOJ4JOyt5PH3v1KhmCXpkpQEb9f+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f14fcfe5f2afa87aa89bc73b98be1a03_JaffaCakes118

Files

f14fcfe5f2afa87aa89bc73b98be1a03_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fa225e54b763276d6b0fd2dfe65f8a7a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadModule
GetProcAddress

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 172KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 81KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ