788bcb4a2cc5e03261e26ee81384bcfd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

788bcb4a2cc5e03261e26ee81384bcfd_JaffaCakes118
Size

96KB
MD5

788bcb4a2cc5e03261e26ee81384bcfd
SHA1

3f4eaac77a0869e636a64dba110cae2f2cdf74d4
SHA256

5cbd19b67cf96673ce8ae979e85e1f50e25b5dddd46ae573c113b60a2e983b4a
SHA512

4d2720fdfe371d41f59f19c99b7b2f6169f5e919196fb55a45ba303e11582f99e90073a3c70aaaae1d90917964c95fc44bf284f2d4cbb11d25aeb178ba3bb57f
SSDEEP

1536:Hz0A39yX0OYu5pTe10Cexm3CRrCVR6RVqA00igVXNcAF9zlhdCDZUgeKJ5DD:B9GR5heYACkR6RVqA/VX+ArdCDC7K/D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
788bcb4a2cc5e03261e26ee81384bcfd_JaffaCakes118

Files

788bcb4a2cc5e03261e26ee81384bcfd_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b6198c6c6a8917528dbb84ed2835146a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxW

Sections

.text
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 236B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ