19dc79545fc099c5a6acc424612df9ec_JaffaCakes118 | Triage

Sharing

General

Target

19dc79545fc099c5a6acc424612df9ec_JaffaCakes118
Size

51KB
MD5

19dc79545fc099c5a6acc424612df9ec
SHA1

2ca3ff61ef75acdea2d040630fbf2e7c3604c5c7
SHA256

fdfe3b1fad72e0ba93c106a3ceaa884d4d7eaa04b91676b61820de58822101f5
SHA512

5f51124fd25e72fa80d94053f79a9e4866bd2b2f25ecc926ae191fec8293e243e38b5bc6d3987c801daf5cd4bfe59f358798f2fde3c9fcaa0d5ad0f3ed4392fd
SSDEEP

1536:oq0usAHTOrAWmoyWkLpUvWxijLrK3rmokh7cInhzEK:LwTQWkyQijXokh7cQzEK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19dc79545fc099c5a6acc424612df9ec_JaffaCakes118

Files

19dc79545fc099c5a6acc424612df9ec_JaffaCakes118
.exe windows:4 windows x86 arch:x86

541160bce55bf5030f1053d9ca2f310b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

ExitProcess

Sections

.code
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 39KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE