490f19e60ed5a8d30f0e6cf5f5b13398_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

490f19e60ed5a8d30f0e6cf5f5b13398_JaffaCakes118
Size

478KB
MD5

490f19e60ed5a8d30f0e6cf5f5b13398
SHA1

35a1c3abc4692dc8b89b1a958c5d9c6638086bad
SHA256

cf05689ab35af4a1132a922337dd00cbceda709e72acd0f863c20d3e9470aa11
SHA512

c891328c0b0a128964b871480a2268c549ed7ced5f0f0016f93f5023c448eba6c736510c64e1ff219e635da14d5c8531dcdc713c403876737f995b3a0cfaa44f
SSDEEP

12288:ZnfWiB2GPrBM4s6lmM2odTlUES77j30k9IToIwray7ZutA9Texi98K9V63on56/:ZnOiBxrBMF2mMdTlUEo7j30pTrrA9TeZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
490f19e60ed5a8d30f0e6cf5f5b13398_JaffaCakes118

Files

490f19e60ed5a8d30f0e6cf5f5b13398_JaffaCakes118
.exe windows:1 windows x86 arch:x86

9aee98d6a11dcd89862ae8783a58ca48

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
LoadLibraryA
GetProcAddress
GetModuleHandleA

user32

MessageBoxA

Sections

.text
Size: 512B - Virtual size: 42B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 226B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 475KB - Virtual size: 475KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE