3bd60ebd3fd9304e1ca4ece443713ccd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3bd60ebd3fd9304e1ca4ece443713ccd_JaffaCakes118
Size

50KB
MD5

3bd60ebd3fd9304e1ca4ece443713ccd
SHA1

d1c7725216741394881a4e8afd20c19474df9bd3
SHA256

f7fca0a803f65c8c6b00296f940094cc1ff60e52fa53f733bc6c755806049749
SHA512

5271804fcc1b187fe3943e897ed5edccea648222a7b09c0938f175912f81a4f1d2795216c30b906274ffdc57af7498392888690eaef873a3a8038cbedbb64cab
SSDEEP

768:SLVnB3ADczyXTTN9QqCOX+QqBPFRzfoAQxJiNYXDULMhU7iS:SJqgzyN+AX+QI9Nf/XNYXALMhV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3bd60ebd3fd9304e1ca4ece443713ccd_JaffaCakes118

Files

3bd60ebd3fd9304e1ca4ece443713ccd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

541160bce55bf5030f1053d9ca2f310b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

ExitProcess

Sections

.code
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 39KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE