41ef47680a58b1e71aaed8b453789f15_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

41ef47680a58b1e71aaed8b453789f15_JaffaCakes118
Size

50KB
MD5

41ef47680a58b1e71aaed8b453789f15
SHA1

0c3b7a1fd0b8043eeff362fd1d6a6d554c51395b
SHA256

66045565a9af5f5b8a93f02022c9af4d52f584f47a94f763a5b25ffa374c0d1a
SHA512

0ef8deaafd76e303d0925a54b3b29cf9b64f449977052702c8bcbf8602ae27ec917afed3236d58556af139bc8c3c7057b6094944b06ef9b589cebba52af73964
SSDEEP

1536:p2JTwVus9d5CbLs3MR6J/rcrgusVr8MvX6lioTNA:EJTSuC56s3g6J/rcrhsVwWOh6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
41ef47680a58b1e71aaed8b453789f15_JaffaCakes118

Files

41ef47680a58b1e71aaed8b453789f15_JaffaCakes118
.exe windows:4 windows x86 arch:x86

541160bce55bf5030f1053d9ca2f310b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

ExitProcess

Sections

.code
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.code1
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 39KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE