49cb3c25e4fa090841cc3aa0d5a98524_JaffaCakes118 | Triage

Sharing

General

Target

49cb3c25e4fa090841cc3aa0d5a98524_JaffaCakes118
Size

52KB
MD5

49cb3c25e4fa090841cc3aa0d5a98524
SHA1

3ff2febe0c04e251f98689219b9e836c65a9e4dd
SHA256

526b57a511dd42e3005bca10e0b751a3a4b43e90eab20b91a74083a2fdba1ab4
SHA512

b536fff8e869d50f7b4b0e9980d90478dff49b4879a32b2c200fdcf49c97b67a563ab8679fe651d29dd68b4893bd899e8af6fe83f33d4035a3d548b7c534f784
SSDEEP

1536:jAuzYF/ap4d6eOc16s07cyXqJBacYWkx71z:BKc4Ee316Gkx71

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
49cb3c25e4fa090841cc3aa0d5a98524_JaffaCakes118

Files

49cb3c25e4fa090841cc3aa0d5a98524_JaffaCakes118
.exe windows:4 windows x86 arch:x86

541160bce55bf5030f1053d9ca2f310b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

ExitProcess

Sections

.code
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 40KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE