456f8ce39234edf5234650532b8004aa_JaffaCakes118 | Triage

Sharing

General

Target

456f8ce39234edf5234650532b8004aa_JaffaCakes118
Size

549KB
MD5

456f8ce39234edf5234650532b8004aa
SHA1

4db1eff8b704d439bc06a348b707d3dfa86e15e0
SHA256

da2e679b3e9113d736e85298168eef56d4d11eb562075182005b41c403a45ee8
SHA512

73b890bbd6d7d90036447a2cf59e20e97a92e26293ff8a44fc40f007478839aafbd10348151202bcce0e1bfd4cccd8f239ae42501cd1c6aa25e7334a4d21f521
SSDEEP

12288:JEAvnWWj6J5Cm1xHoxG1/cWAd99yaZ5biZZsHhCQ:GAP6HCm12G1fABHZ5WZZmC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
456f8ce39234edf5234650532b8004aa_JaffaCakes118

Files

456f8ce39234edf5234650532b8004aa_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fa225e54b763276d6b0fd2dfe65f8a7a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadModule
GetProcAddress

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 509KB - Virtual size: 509KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 35KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ