fe5f2c8ad7e0456deef4b13e65392269_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fe5f2c8ad7e0456deef4b13e65392269_JaffaCakes118
Size

49KB
MD5

fe5f2c8ad7e0456deef4b13e65392269
SHA1

c77dcfd097d4b43b60677503176e54964a47f3e8
SHA256

2ad9db7a8a6ca2ec664e67d7dd2ad386d87bb1204cb1d47a0eb8b1f2a3b831ae
SHA512

1c52db5a6cfb3cbc22ec545bf9beb291dcf42227b28ca86c307bdacb041a6dae2a1f657a3ce34a0ced33eb52be8acde36fa71eed9a918ea714e1467e699829e5
SSDEEP

768:c+PCgQOf9eppo7zV6T6LwO+CxqITDgn2rDkb1JqPXYDi+h/tJ/M:k0oER4HgxqSDg2rQb16YLhVJ/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe5f2c8ad7e0456deef4b13e65392269_JaffaCakes118

Files

fe5f2c8ad7e0456deef4b13e65392269_JaffaCakes118
.exe windows:4 windows x86 arch:x86

541160bce55bf5030f1053d9ca2f310b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

ExitProcess

Sections

.code
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 39KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE