38e734b61d6ed2072942fe9f9462339b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

38e734b61d6ed2072942fe9f9462339b_JaffaCakes118
Size

15KB
MD5

38e734b61d6ed2072942fe9f9462339b
SHA1

cf3e6698130c1648ea264790855247cb7147301f
SHA256

eb1e7b2b937923a17930c1206be5d63ffe02df5dc385e60ab0bd7babf64bb389
SHA512

ee493df82014ee473dc0a5706de9fae1ca3204c8b8053dcac741e77a930bb1a6bb25b9a6f9b0af6d01d19a35bad8bd19efc6fe334712be24ec2cdf48cb3e96b5
SSDEEP

192:gPnQ+defCzLJlRc2N7LckfyJM+aOzL4bc0ggUFIccXnOUH+XY:gfVdeqL/cmt7Q4baXWccXOB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38e734b61d6ed2072942fe9f9462339b_JaffaCakes118

Files

38e734b61d6ed2072942fe9f9462339b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

541160bce55bf5030f1053d9ca2f310b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

ExitProcess

Sections

.code
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 9KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE