2bb7468762c1de02b440503b8cb5d3d5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2bb7468762c1de02b440503b8cb5d3d5_JaffaCakes118
Size

50KB
MD5

2bb7468762c1de02b440503b8cb5d3d5
SHA1

d7e0e35d508c4bb5c425e221be289494b4d0c5c0
SHA256

76420c6f7eec687f91728320487a3c6403fc0d3505654d418e4e1c99c2829f35
SHA512

3dd6cd3251798a670061d49a993f7cc5f20500b96816265d092761706770b56807a7798517c02c8b651a68017f86062c4900d4cd496757801f71b81abb6d53e2
SSDEEP

1536:fHJL2FhN7c94HPsu5HUt2CH8vMEFFwi3jxzuX7sG8jqf:fHJiFhBaw0GuN4wYz4wXq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2bb7468762c1de02b440503b8cb5d3d5_JaffaCakes118

Files

2bb7468762c1de02b440503b8cb5d3d5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

541160bce55bf5030f1053d9ca2f310b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

ExitProcess

Sections

.code
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.code1
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 39KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE