83bdb6021880410c56fc3d7343d78f44_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

83bdb6021880410c56fc3d7343d78f44_JaffaCakes118
Size

52KB
MD5

83bdb6021880410c56fc3d7343d78f44
SHA1

46e3ac9537830d461dd6935f00b1bbbd35d9f544
SHA256

34a3896040278867e31d6d45fe3d5ce804d2bb302989d3a5c45b5171474ec8f3
SHA512

de487575bbf40be2fcda4689172729ff912cd7b5d53680904095e24f204647052eb0e07226485ca9becd1729d4a7356c5117d58966c8b8e1ae4fe4f792e52aab
SSDEEP

1536:Gjexqd8ZdRmZFhX7TBDuw/vDxs1w96NviYKn:zx/Sj/fzxSNvbKn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
83bdb6021880410c56fc3d7343d78f44_JaffaCakes118

Files

83bdb6021880410c56fc3d7343d78f44_JaffaCakes118
.exe windows:4 windows x86 arch:x86

541160bce55bf5030f1053d9ca2f310b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

ExitProcess

Sections

.code
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.code1
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 40KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE