0f8d2487075c52c8e0b9bbeacdbfa132_JaffaCakes118 | Triage

Sharing

General

Target

0f8d2487075c52c8e0b9bbeacdbfa132_JaffaCakes118
Size

50KB
MD5

0f8d2487075c52c8e0b9bbeacdbfa132
SHA1

04a395ca7e09cf742f47e16315b445b9ee0840d5
SHA256

506504fc7d45366199579cfc3bbe7254e9e99fba687697b3dd40ca7a05bf14f1
SHA512

4224e701f05dafbd1d3d7657e05aca626673cae8d33a7ad2f878b6558df01e48a182c759d8d5bfe3e865c32a47f1911fa0c930e745a979d07dfef40abf33a242
SSDEEP

1536:L/Cl42QxDPJ8f3waEKdWlt5CFL+UgYo9+8Wyfis4wIA6Rx:uiB1PJK3wtvlqAUDk+ZyfisZI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0f8d2487075c52c8e0b9bbeacdbfa132_JaffaCakes118

Files

0f8d2487075c52c8e0b9bbeacdbfa132_JaffaCakes118
.exe windows:4 windows x86 arch:x86

541160bce55bf5030f1053d9ca2f310b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

ExitProcess

Sections

.code
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.code1
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 39KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE