6f55528ee98a1802c171d5f8efbe083f_JaffaCakes118 | Triage

Sharing

General

Target

6f55528ee98a1802c171d5f8efbe083f_JaffaCakes118
Size

51KB
MD5

6f55528ee98a1802c171d5f8efbe083f
SHA1

886cfc45f5fd57994a80b966fb2b687f68a0b5ce
SHA256

2a44e839c190afa623aa015445d889f016ad81cf17797acdf45aced996a6a77e
SHA512

7201fac1baa99b13218fc4e3427b4fc6a9c7492b498eb7f928e851fa39c4f7aef9721564c537272794c91026e35f39e7edbfa64318d7de89fcfa96804e02071b
SSDEEP

1536:M3hc/TaeaAK4eCj35obhruS61optt2/zL5Pb:goaeE4h34hqfup/2rNT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6f55528ee98a1802c171d5f8efbe083f_JaffaCakes118

Files

6f55528ee98a1802c171d5f8efbe083f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

541160bce55bf5030f1053d9ca2f310b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

ExitProcess

Sections

.code
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 39KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE