678ca5dbcfd15f93a1ba10a8a1b03d71_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

678ca5dbcfd15f93a1ba10a8a1b03d71_JaffaCakes118
Size

50KB
MD5

678ca5dbcfd15f93a1ba10a8a1b03d71
SHA1

781acbeb99f898df93d97a02e5dbd63a83dbbf2a
SHA256

9d18666e9058fab88fe167da0ffe9f0477b5b4f2a83c3ed519dfc7a00daa2671
SHA512

826c582b80375eb8d5f00fcef07a06607c80ce748368b42ef3d154bf08970e3281fccaa8913d61046b5a4cb092a7e85783a309f9d6ed23a4f4f518cc470b3392
SSDEEP

1536:s5lsj0hO266nf9QI3qMHbkCuLXrB6B+Ypok6:s5lvhzmI6XPXQpD6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
678ca5dbcfd15f93a1ba10a8a1b03d71_JaffaCakes118

Files

678ca5dbcfd15f93a1ba10a8a1b03d71_JaffaCakes118
.exe windows:4 windows x86 arch:x86

541160bce55bf5030f1053d9ca2f310b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

ExitProcess

Sections

.code
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 39KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE