91e81fbbcc9a28741fe5ea6990106e0d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

91e81fbbcc9a28741fe5ea6990106e0d_JaffaCakes118
Size

94KB
MD5

91e81fbbcc9a28741fe5ea6990106e0d
SHA1

97cf2065ec1a5997e3cbe4144f499758dbee7572
SHA256

a45502090fb687f93b6b3e6fdfbb83b44af561b9caeda1f161ed3e352fd22849
SHA512

ddb97cda9081892d6a29fc8bc7556f6efcfdc9ea9ae71bd2218cad3020fc7a35492584ffc76f863a2ccb361970a2501a4642f900f776386ad84aa480068e7e48
SSDEEP

1536:xrd0adp12uW6zY7P+v6IET1CE62v8rSiYgn7sfZYZWjxKEHWXTFw:DXdr2KY7P20TA320ObCIJKMWXTFw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
91e81fbbcc9a28741fe5ea6990106e0d_JaffaCakes118

Files

91e81fbbcc9a28741fe5ea6990106e0d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b6198c6c6a8917528dbb84ed2835146a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxW

Sections

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 228B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ