23dbd6898f8957b575b369e6f2a6d32d_JaffaCakes118 | Triage

Sharing

General

Target

23dbd6898f8957b575b369e6f2a6d32d_JaffaCakes118
Size

65KB
MD5

23dbd6898f8957b575b369e6f2a6d32d
SHA1

b89e94155b9244d8514962ed8ed5c5da7b774301
SHA256

4450d10ded57db8fbb656c351062cb7e64435673e4d04919e636242e8e37aea2
SHA512

5e2c493b564ee9f56577ebfd05651e7702a4549c71b3f4e19fc6634e87c2f66cce72c4c215506fccf0781b9f1ba1b9fbd04603761b26cc4c298bd0e528faf21c
SSDEEP

1536:wKU6csYsMpVt1w75F1QM6wj4f86UBlE5nbep6:wKUZ437TKM/jU8rsVk6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
23dbd6898f8957b575b369e6f2a6d32d_JaffaCakes118

Files

23dbd6898f8957b575b369e6f2a6d32d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0efa97583f401d9c61e07ad9fbcfd08b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlUnwind
RtlUnwind
RtlUnwind
RtlUnwind
GetModuleHandleA
GetProcAddress
GetOEMCP

user32

MessageBoxA

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 105B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.protect
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE