40a1659dfdd2c9d43150ee6759ed3245_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

40a1659dfdd2c9d43150ee6759ed3245_JaffaCakes118
Size

28KB
MD5

40a1659dfdd2c9d43150ee6759ed3245
SHA1

1b34cea0cf0fe58e86f085a10e967ca28c2ab229
SHA256

cc575aaf67bf349b2a1b795b684b838127f0f32df9a0dcd8bdf45d66345aa923
SHA512

fb6e0c34180ff521c98f064bb439da37cabd4e3aa003400d89a0e04cca4f1cc355728f09842278b0f2c297d6984d38377740f97b688f7e82ed5c4c2e4beeb29c
SSDEEP

384:JQnPzwxI259U+c5bnhMUXHvYlaLTcaTsyqkzxZaDA0WK5/IUYNzBIpjismokBdjH:JYkxaFnVXroaQyqhDA0p0NShFH6EdXi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
40a1659dfdd2c9d43150ee6759ed3245_JaffaCakes118

Files

40a1659dfdd2c9d43150ee6759ed3245_JaffaCakes118
.exe windows:4 windows x86 arch:x86

541160bce55bf5030f1053d9ca2f310b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

ExitProcess

Sections

.code
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE