326c884e55f23ee5d1826d719515331b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

326c884e55f23ee5d1826d719515331b_JaffaCakes118
Size

28KB
MD5

326c884e55f23ee5d1826d719515331b
SHA1

0091cf92b27276c0850e3d63890219d3f6880bd7
SHA256

08592da1a08c59ddf26dc24316a18f8f029c796d8a057ea9f3435cd56d1f0bee
SHA512

45bf9ea84d455bea097a9dcc862777207fbfa942acb1d4afc59627b2b3ff564c00a027d17f12228e09d1acd35228f46bd68b95b862b445d324ec0decd85cb505
SSDEEP

768:lShRMicYv0rJIi8bprpWocgyMI/Xh36/2D:lGj0IXbp0o99I/t6/2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
326c884e55f23ee5d1826d719515331b_JaffaCakes118

Files

326c884e55f23ee5d1826d719515331b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

541160bce55bf5030f1053d9ca2f310b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

ExitProcess

Sections

.code
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 9KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE