78e828e014dec35990bbc7aee4361791_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

78e828e014dec35990bbc7aee4361791_JaffaCakes118
Size

82KB
MD5

78e828e014dec35990bbc7aee4361791
SHA1

5d2480993404f79dc64ffd7bbbe2e3414a60f1f4
SHA256

48ba916554129478608899218116e7e60e547f768f7587b24e60f8fd15a55a14
SHA512

8126c9bf12d32fc64c2a9f824ee14a0322f39b444570112e2ad1172b70c18e2ca6afa3d31847d702e7ffd28c31d185367a9a4cd6d1dc5b3064c6254b75c11814
SSDEEP

1536:Lz7XE3QjjRDnQmJ0FITbz8PTlX2Vf5FAvNfmLHfq9dk11C2MC6k:LzrE+joI3z87lmpiMS9EC2MC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
78e828e014dec35990bbc7aee4361791_JaffaCakes118

Files

78e828e014dec35990bbc7aee4361791_JaffaCakes118
.exe windows:4 windows x86 arch:x86

500ff1538958cc73738bf0c262a1773f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA

user32

MessageBoxA

Sections

0964418
Size: 17KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

2975546
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

0554590
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

9650338
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE