73fc1c69c27e2ee4e97455a6f8c65fab_JaffaCakes118 | Triage

Sharing

General

Target

73fc1c69c27e2ee4e97455a6f8c65fab_JaffaCakes118
Size

47KB
MD5

73fc1c69c27e2ee4e97455a6f8c65fab
SHA1

3f622441080d8dc033808e10348de3c8009585f9
SHA256

04ce868030f813e5368382717fbc64c12937fcaa2bd880ebc3790105208572c6
SHA512

06e8d0c6a3ab500f22465f9fb59a546e767f3402e716eba02efad44df1bbb243ee2f536d1fab21ef34bea947554deeeeffb0503b0392eeb536fb358e7e4f71b7
SSDEEP

768:zOItc/f04fl6IsprnKwzjJaC6/eqbkxfRUIKj2C5LShzngss7Y9LbZFAEJw:y/Bd05KwzjJBfXxfRNKSC5Lk7gVALgk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
73fc1c69c27e2ee4e97455a6f8c65fab_JaffaCakes118

Files

73fc1c69c27e2ee4e97455a6f8c65fab_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fdbfec85672f73d2a4d49635454936d4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
LoadLibraryA
ExitProcess

user32

MessageBoxA

Sections

.text
Size: 1KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 37KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.perplex
Size: 1KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ