46961d8242beba00fbc793c450c77a7c_JaffaCakes118 | Triage

Sharing

General

Target

46961d8242beba00fbc793c450c77a7c_JaffaCakes118
Size

74KB
MD5

46961d8242beba00fbc793c450c77a7c
SHA1

e89f10b86ce425e0da03097b86ae3e6159139e37
SHA256

0bf0c1b1894fda696e0b73dbcd467af28b1bbdd0a873ca1b795a896294f0bdeb
SHA512

d4fe68e97ea9770ab36987926c9b1999b440efc9002dc94dc64ce29fb2ac18e674c99c7254fdaf115233e3064fbca3c65a63686e76eb4b0b1b52c607552fd324
SSDEEP

1536:gQBFH3fgCVKqFKmYkeBdNu6Wipvn+8cxxbCnlKGj:pBFXfgCJzeBdSs+8Cb72

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46961d8242beba00fbc793c450c77a7c_JaffaCakes118

Files

46961d8242beba00fbc793c450c77a7c_JaffaCakes118
.exe windows:1 windows x86 arch:x86

e2649837c59f87885ca4eb82bebd799b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
VirtualFree
GetProcAddress
EnumSystemCodePagesA
GetModuleHandleA
ExitProcess

user32

DialogBoxParamA

Sections

.code
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 282B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ