43121dcebd2eada312a3e143f93f58ab_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

43121dcebd2eada312a3e143f93f58ab_JaffaCakes118
Size

27KB
MD5

43121dcebd2eada312a3e143f93f58ab
SHA1

d58e16e94bb531183b098bf9a71d965d7fd8dff2
SHA256

8a1e17adffed53f03e3f0d570bcc9b43d710baa4879d049c404fbd04920b6a36
SHA512

c0d6937f384dcd8539f43171f753f836dec67c0481fda97845e52b7d3e6bbf505b938dafb36603fa978545562b274675d4c8765495bacf103686ac941ea2fb13
SSDEEP

768:M+pdQw2Fvfc2Fwva+Bo+nTwiSdw0Z5UV70gfs8Ubrqx:MIaflU2MTo+nE/woy0L8mr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
43121dcebd2eada312a3e143f93f58ab_JaffaCakes118

Files

43121dcebd2eada312a3e143f93f58ab_JaffaCakes118
.exe windows:4 windows x86 arch:x86

82fb704212017bcfbf7b501eda5c6100

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

CreateThread
ExitProcess
VirtualProtect

user32

MessageBoxA
wsprintfA

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 56KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE