4e18bbe76bd059f371da03a5c0b4bbfc_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4e18bbe76bd059f371da03a5c0b4bbfc_JaffaCakes118
Size

28KB
MD5

4e18bbe76bd059f371da03a5c0b4bbfc
SHA1

2d89220987c9388f87769ef07a27d5a30ba38c6b
SHA256

2e7c4d3e24375b2fd26637bfaca03667b0c35dda28f0e42bb562b09ddd852f81
SHA512

959e640bb53faa0670ef28c71dedd217eb0b33a3d116a307c0888623cd089aafea402926d6881f16b32d606b2b7cfcf4a11416c522c11e22b3213d10dbee4a97
SSDEEP

384:DyzIjz4IzlDjM1k8wOJv60yb7SCjxCOQE93nvrkLztHaEGXzPx8q2X5/36T1CiY:WG4Wh41nDv6N/SchQ0nYoEcPTWJ6IiY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4e18bbe76bd059f371da03a5c0b4bbfc_JaffaCakes118

Files

4e18bbe76bd059f371da03a5c0b4bbfc_JaffaCakes118
.exe windows:4 windows x86 arch:x86

541160bce55bf5030f1053d9ca2f310b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

ExitProcess

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text1
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE