5eb772fbb77657d9b34dd9018180f164_JaffaCakes118 | Triage

Sharing

General

Target

5eb772fbb77657d9b34dd9018180f164_JaffaCakes118
Size

22KB
MD5

5eb772fbb77657d9b34dd9018180f164
SHA1

1d64b564b6966f1113d545f09971925411a24767
SHA256

64ab4ce6b77931888a5b307680e8bddccfb0dba60bb95e5da2585a9d64349e2c
SHA512

5e89ba50dd9d8a003a5c83238f68d590e648370d693ad9a280fa82a08c8d26e835181038374b5e7ed289bec907350b1e32b7d6e86b665774f5b3183e2a2313a8
SSDEEP

384:nSlgQcaIoqpDgg7SUse81A6PyU6eDbkUHhB3b7PieHa/eCIrxKyAY9:vtg7Ua1A66ADbt7P35CUx9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5eb772fbb77657d9b34dd9018180f164_JaffaCakes118

Files

5eb772fbb77657d9b34dd9018180f164_JaffaCakes118
.exe windows:4 windows x86 arch:x86

541160bce55bf5030f1053d9ca2f310b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

ExitProcess

Sections

.code
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE