8380a247634d33d51e9b60803ee33005_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8380a247634d33d51e9b60803ee33005_JaffaCakes118
Size

51KB
MD5

8380a247634d33d51e9b60803ee33005
SHA1

fdeb6f5c606c8e4b19a2684e69e54d0188db85b6
SHA256

ba7708dec589616f374fd17089c108d57eb9a83e91da1d981c3170b9448d2871
SHA512

63546fb11726d2582838c8a482ab1ef2b64819ea3d644a2857f13e51d984b1e22c1626ced25a687aa82018c39bca88baf5955e8e7676e26e4a4532e997a144ef
SSDEEP

768:otdBJZCe75BO7w/6t6O5cRvtF7jRKQhfdYRuPBV5RldTN33b8Cke29kN+QCFLPwR:SJow5Ba80sFFhzfdcub5RlPg3e2q+c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8380a247634d33d51e9b60803ee33005_JaffaCakes118

Files

8380a247634d33d51e9b60803ee33005_JaffaCakes118
.exe windows:4 windows x86 arch:x86

541160bce55bf5030f1053d9ca2f310b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

ExitProcess

Sections

.code
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 39KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE