2869c9c126de4300865500e8cd840ddd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2869c9c126de4300865500e8cd840ddd_JaffaCakes118
Size

51KB
MD5

2869c9c126de4300865500e8cd840ddd
SHA1

4b6b837ec38df23c1b5262b798a3544d54b18ce3
SHA256

ff7c5c9b7fa23dcf5a251f60b9826f9233e57966d29138c7b8e5b519787e94eb
SHA512

6aead15d3444feb1a5a2cab99a826d81502bd8a8701dc7853adde3c345db092f587904aea860c4f980c18f021c06d4c41b3726ef7b80f3beec0e4376f009ba6e
SSDEEP

768:eEnnCWK1K2Q4dm8IU5btOkHyTBF44CH76YE4aMHhsbGvYFAkt4M:esnVKq4dm8IUR/HaY4m6l4VBsb0YFx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2869c9c126de4300865500e8cd840ddd_JaffaCakes118

Files

2869c9c126de4300865500e8cd840ddd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

541160bce55bf5030f1053d9ca2f310b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

ExitProcess

Sections

.code
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 9KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 39KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE