711ffe0f5a20839f340303cf33420af4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

711ffe0f5a20839f340303cf33420af4_JaffaCakes118
Size

51KB
MD5

711ffe0f5a20839f340303cf33420af4
SHA1

89845f6060c4b73dabed59a4e9a02c939b5bed25
SHA256

7a47518b434dc0b54ef8359add87a394d8b44b21adc6c6d6020bfc4095078200
SHA512

1014672e1befc57f76abc423ea2dcc8ead2d1db0644d4ae65c462cd38c02396bc9dac6c194acc10da50ddeb2142c69f3356dc5c7a0a0de36f709ffa3898a69a7
SSDEEP

768:cyR/ZWM4y7XtBQVzltfjgQJG/oVDtAzmHVFb6xsWPT014hn1HcejX2A5Rs6lPR+S:hbBqzDcQzWzmH31WPT51Fu6lZ+zvN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
711ffe0f5a20839f340303cf33420af4_JaffaCakes118

Files

711ffe0f5a20839f340303cf33420af4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

541160bce55bf5030f1053d9ca2f310b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

ExitProcess

Sections

.code
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 9KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 39KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE