66e8ad38f4ebbb8a240736e257f26ba4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

66e8ad38f4ebbb8a240736e257f26ba4_JaffaCakes118
Size

44KB
MD5

66e8ad38f4ebbb8a240736e257f26ba4
SHA1

7eb613f008b4a8faae3e376343361862af60a8fd
SHA256

45323a9306e9cfa77b0d0615693e9d0c3df52287a32bbaeae77fe04c9722f0e6
SHA512

7a49811647955066b914d9b2354b6a910e7979ba36315922cd6b8a14dc2a14c77ca06c4fe6d0d9ad4c9fdc644234ab9ca1eda21f12ca2fdd9a8df37b98a79690
SSDEEP

768:9DTfNgsTBH3QFiDfMlw7Lb2+ik+qnEfh0VlvDK4bC7+528dYjxk:TBHUiu0H2ctVlvk7x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66e8ad38f4ebbb8a240736e257f26ba4_JaffaCakes118

Files

66e8ad38f4ebbb8a240736e257f26ba4_JaffaCakes118
.exe windows:1 windows x86 arch:x86

5d7d6377bdf01118c91bb0310501702c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxW

kernel32

Beep
ExitProcess
FormatMessageA
GetLastError
GetProcAddress
LoadLibraryA
LocalFree
SetLastError
UnmapViewOfFile
VirtualAlloc
VirtualFree

Sections

.data
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.code
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 378B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ