f95725795ab914f369c95bd464471ac2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f95725795ab914f369c95bd464471ac2_JaffaCakes118
Size

22KB
MD5

f95725795ab914f369c95bd464471ac2
SHA1

351bd6f8c3ff87ddefb1c757b5e1f8aa944c8d4e
SHA256

47bfc75a4c4b0ecf96c5f73ca5c08bcbec428396e2c25d3535c467305cc02bd1
SHA512

820b8ee42c8f083554872fc0e14690e39d6c5fceaa9ca9b1a0a562c76547a9d4788905d2cf2cd4b7bf42c5f8fed216e3448d3b87040bcf19b585d37eb2510d3a
SSDEEP

384:ySlgQcaIoqpDgg7SUse81A6PyU6eDbkUHR/4GYViPEF9EQ:Wtg7Ua1A66ADbtF7YViP62Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f95725795ab914f369c95bd464471ac2_JaffaCakes118

Files

f95725795ab914f369c95bd464471ac2_JaffaCakes118
.exe windows:4 windows x86 arch:x86

541160bce55bf5030f1053d9ca2f310b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

ExitProcess

Sections

.code
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE