3c4abb46728e58313485f908d7c9fdc0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3c4abb46728e58313485f908d7c9fdc0_JaffaCakes118
Size

15KB
MD5

3c4abb46728e58313485f908d7c9fdc0
SHA1

0af8c60a7cf72ecc3354a68043d3835d1dd2e95e
SHA256

966b2c90e17cd76c3148eb32d6a68e7cbbbb37b9f5d25c7190255c8ccefa1e8e
SHA512

c0413a288235189f0409dd8be67729e45d7e08ba4621886264e694208e9d0712556900341d01fc97670b249cd48abaa80bc9ce7af31253909ad78e9cf6ee14a4
SSDEEP

192:f89hthYxcQ8fzGSxJBcj3BBRQsv/nY7Mqt8XpR3e+5He:sthYyQXUcjHXY743e+5He

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3c4abb46728e58313485f908d7c9fdc0_JaffaCakes118

Files

3c4abb46728e58313485f908d7c9fdc0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

541160bce55bf5030f1053d9ca2f310b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

ExitProcess

Sections

.code
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE