663366649d80c416420b5bddc32fc0ed_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

663366649d80c416420b5bddc32fc0ed_JaffaCakes118
Size

51KB
MD5

663366649d80c416420b5bddc32fc0ed
SHA1

ac075ad5ab05e6e6c1b7e6f0e5c01b10e977f4df
SHA256

09ca7b5ae81b72a615c8225a4ee252c1c085ffa6ba169824516270de2ab51ed7
SHA512

55f39cd300329180f5dca9b1887b6b74dd9c211500682f62a9bee19260b145eea45ac9adef9fa1d9bb8123feded7af01547775a47049afd65698e62192ec9602
SSDEEP

1536:yKuu+O7i/I80ofMpWmBV1AmMGzbikdjxMg:9F+O2gifcVMOik1xMg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
663366649d80c416420b5bddc32fc0ed_JaffaCakes118

Files

663366649d80c416420b5bddc32fc0ed_JaffaCakes118
.exe windows:4 windows x86 arch:x86

541160bce55bf5030f1053d9ca2f310b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

ExitProcess

Sections

.code
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 39KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE