0f640075b8a520358fa6ae8d674e5ff5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0f640075b8a520358fa6ae8d674e5ff5_JaffaCakes118
Size

14KB
MD5

0f640075b8a520358fa6ae8d674e5ff5
SHA1

09014bff7e0e4514cd962680ac4ef39a7b15b6e3
SHA256

fe955eb11d46b670027c7d6101cf6891371ff685878bba736a62758a210c2a08
SHA512

6dfb8bb338e44cf00ef4d09fb9a744a44c22e0e650da112add398b414ab3fb65a81fbb7982f58426ae3284cba6cab56027b807ef22bb64bfa125141bf8af1908
SSDEEP

192:KwBpt6qotJmF8BKiSVUWl5mSYyBSW9qt8SVqLbEBIDpIW5SoNi1:KMotD4ifWl5iyBc9VpBAppj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f640075b8a520358fa6ae8d674e5ff5_JaffaCakes118

Files

0f640075b8a520358fa6ae8d674e5ff5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

541160bce55bf5030f1053d9ca2f310b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

ExitProcess

Sections

.code
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE