34a99dcebc4e8ece03749042d230ea45_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

34a99dcebc4e8ece03749042d230ea45_JaffaCakes118
Size

51KB
MD5

34a99dcebc4e8ece03749042d230ea45
SHA1

97dd67099d97820157c4444338b7430c45ba7186
SHA256

e4919435c8137d75aa7b1df3c3794a0082b8cd70f7b8aef07c9fffee41e6fbb5
SHA512

ccece4a74ff7933a0b145a9e1712a14500a4512894da6f15d1c900e4f822e022b79e90ea2b5037364624dffecbe2c4b6798b5278de64b60fc10205e2d64b3c88
SSDEEP

1536:udR9UHt7doYZvgSwOUu1nhbViU+AGyQZZ+Vt/76:cCtJtZnD1h5iUtNQMt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
34a99dcebc4e8ece03749042d230ea45_JaffaCakes118

Files

34a99dcebc4e8ece03749042d230ea45_JaffaCakes118
.exe windows:4 windows x86 arch:x86

541160bce55bf5030f1053d9ca2f310b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

ExitProcess

Sections

.code
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 39KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE