5c13c47f4893249b5017b24e1ba8c022_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5c13c47f4893249b5017b24e1ba8c022_JaffaCakes118
Size

50KB
MD5

5c13c47f4893249b5017b24e1ba8c022
SHA1

db446586c63657c0347ef124bc86f847227105fb
SHA256

29d4ed06711d8d56de255a7ec94ac2ad355289593801afeb78e529a312ae003c
SHA512

65475e6220993747bbc42ca9b5dd11296849447d4a2d1fef515aeb0aca10cc03bff8b8e78a043d195e33cc8549d43cd67d7f570ba8de79691371884b23b0f7f9
SSDEEP

768:AnCrrxLeQEfE6IR4lphYgOnp/rVYm0aqUuPPHRHoiGgtDpH+KF43nsewjM:ACr5dG5YrnpZYlaKRIgtVHMhP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c13c47f4893249b5017b24e1ba8c022_JaffaCakes118

Files

5c13c47f4893249b5017b24e1ba8c022_JaffaCakes118
.exe windows:4 windows x86 arch:x86

541160bce55bf5030f1053d9ca2f310b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

ExitProcess

Sections

.code
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 39KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE