364a6614c66d3337dae970e3187b321c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

364a6614c66d3337dae970e3187b321c_JaffaCakes118
Size

28KB
MD5

364a6614c66d3337dae970e3187b321c
SHA1

42824cc848035e1f1b46030384be533eaa89f38c
SHA256

cbd7d99ac08348749babb968d436e5a19e7a331dcca39940ed2a479cb8e65d25
SHA512

7424d2031bea3e87514e3f19e7d2758c6c99bf015f6560eccd0dd31886e2729b9b5a25caa630b50dea8767dbdffeff6f8436d9992320885750d2d98c0576798f
SSDEEP

768:JvoWHu6hrALww5p7NWBefMA6DTa4H1pcm8:NoWHukCww5p7NrOTa4HXc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
364a6614c66d3337dae970e3187b321c_JaffaCakes118

Files

364a6614c66d3337dae970e3187b321c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

541160bce55bf5030f1053d9ca2f310b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

ExitProcess

Sections

.code
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE