5bdcecd5bc0d04a6dd59c97e41be1a27_JaffaCakes118 | Triage

Sharing

General

Target

5bdcecd5bc0d04a6dd59c97e41be1a27_JaffaCakes118
Size

50KB
MD5

5bdcecd5bc0d04a6dd59c97e41be1a27
SHA1

1f0b7f49adf9f2ceeea6c627e9b5dda3366115e5
SHA256

4d3db01d7a72fcf2f08c8b7ea1178da7d8f0ae8e8fc1e0fd606ec4efd1807319
SHA512

7fbf31539c31a9d96c4d7f2a62934482d2760f52cd15b80b4b76a584587c1af167e6b3eb57a98bdbce09d22c7ae2473694456a4f3a89f244485ab6b3466f6d78
SSDEEP

1536:ILCaNsIbOUh4Q85df6PXhI/CfsHO/4u77nbu:IuaNs24H5CXe/C0yj7z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5bdcecd5bc0d04a6dd59c97e41be1a27_JaffaCakes118

Files

5bdcecd5bc0d04a6dd59c97e41be1a27_JaffaCakes118
.exe windows:4 windows x86 arch:x86

541160bce55bf5030f1053d9ca2f310b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

ExitProcess

Sections

.code
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 39KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE