3d86d71c1858b1824c6062af36228bde_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3d86d71c1858b1824c6062af36228bde_JaffaCakes118
Size

96KB
MD5

3d86d71c1858b1824c6062af36228bde
SHA1

d3bc5e980caf647da5b6704eb6b1a6bee910783f
SHA256

313e488251848fc8de52276dd86a5d87ea5e5a7ac2a85ae65acac76ea002f5c7
SHA512

889c49c906f48ae27b3caee15b2b9e2ef9e3c5d56a883d281f7b0bbfcbc7afea50786bc443eeecc9696ba27e9170ca991ac6fbcc3f571c776d61375b8aa9d4f0
SSDEEP

384:ZUNVFb15Wb7UycaQST/Yzb8IvArrT9SMkfyAsuL/6EfupmZ:ZIUnUnaPreL49GyAzcm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3d86d71c1858b1824c6062af36228bde_JaffaCakes118

Files

3d86d71c1858b1824c6062af36228bde_JaffaCakes118
.exe windows:1 windows x86 arch:x86

105732f0c6968ac8bea2b4476eda4263

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

user32

MessageBoxA

kernel32

GetProcAddress
GetModuleHandleA
ExitProcess

Sections

CODE
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 61KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 32KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ