47f0e40c58cdd5a11ea082839b514368_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

47f0e40c58cdd5a11ea082839b514368_JaffaCakes118
Size

20KB
MD5

47f0e40c58cdd5a11ea082839b514368
SHA1

13a05d6823f67978dc0d0c4409346f2fcf9ea5ed
SHA256

a2f34d828bcc64c9cfbc9854b01b57b9dd97248ad627519bebc93c4553ecdd06
SHA512

d30bb818439aa6f7e3a20881698abe8e0bccf1ba3b3576b5aedcd6462d41ad8212cef87583ab093866f4c5e7287eeb29e808552f1f996fc8d8d2ea160f405b3e
SSDEEP

384:UyxBd8TEM0rA1Asf0/WWiQcNaBLqQgjwDISAAgi:U3EM0rA1Asx57a3gjwtA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
47f0e40c58cdd5a11ea082839b514368_JaffaCakes118

Files

47f0e40c58cdd5a11ea082839b514368_JaffaCakes118
.exe windows:1 windows x86 arch:x86

30cff2a5356cc7618040ea1810712831

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess

user32

LoadMenuIndirectA
LoadStringA
MessageBoxA
MessageBoxIndirectA

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 226B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE