44121dbfc52d20c42f22f6d19e3d5677_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

44121dbfc52d20c42f22f6d19e3d5677_JaffaCakes118
Size

18KB
MD5

44121dbfc52d20c42f22f6d19e3d5677
SHA1

cbea410de87bf789c75272020acc51df55cc2c64
SHA256

73e71f8ad02ce5c838eb76487d6fd2d53c230ce7be44c0b1d8c46a1d6add45ac
SHA512

d41f6c07166cfd2a16772178bd73056e5dd83b0cd70c1ad1888530394a7c71a39134a4777d896eb5dfe8f8752b7dae151d82759399ab6206c443f5b7bcfc4436
SSDEEP

384:kSlgQcaIoqpDgg7SUse81A6PyU6eDbkUH9T8Y:0tg7Ua1A66ADbtdT8Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44121dbfc52d20c42f22f6d19e3d5677_JaffaCakes118

Files

44121dbfc52d20c42f22f6d19e3d5677_JaffaCakes118
.exe windows:4 windows x86 arch:x86

541160bce55bf5030f1053d9ca2f310b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

ExitProcess

Sections

.code
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE