2d7583f38f6f61d4fc6a2e1b9d0dde14_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d7583f38f6f61d4fc6a2e1b9d0dde14_JaffaCakes118
Size

48KB
MD5

2d7583f38f6f61d4fc6a2e1b9d0dde14
SHA1

bbd245da0e159fd7c41ad76124dacaa4c6b61625
SHA256

87e81fb4e08ebef534b5c2648d09110d3887f1f51f37ab1206b0b295fc98507e
SHA512

e15f954b759220535969ce2e5380b966e8586a591ddf0c18f113789da245fb0c3dcca4027a31624c8c82be809869ed66fe1ee3ff3d01b04ec406817834baa604
SSDEEP

768:5V0q4WYu79w9m1ZF/tJ4nGDS779CqpixgAUlF7z9veZ1Kw1j:kq4Tu79ieZF/tXDG9/paRS1zgZ1J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d7583f38f6f61d4fc6a2e1b9d0dde14_JaffaCakes118

Files

2d7583f38f6f61d4fc6a2e1b9d0dde14_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1c372311534116eeffdf56f3f6c69c5c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
ExitProcess
GetProcAddress

user32

wsprintfA
MessageBoxA

Sections

.text
Size: 16KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sinaps
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE