8797bdfc0308353872a160f8e5362c8f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8797bdfc0308353872a160f8e5362c8f_JaffaCakes118
Size

99KB
MD5

8797bdfc0308353872a160f8e5362c8f
SHA1

6d2d6566b772e36091331903248c58b5b6c9b1ba
SHA256

916c57b1ef4ddf765d6e7b4c0d609b94ee84ee63fb9bae9aa680f5e363a2b90b
SHA512

1776698aedb973a922b6ab07af12ca9b746b658cddc61d1eec0514fc9e98110f26155a0251b80ceb6c4d5242ec25293932a26a6a2ca9af7eda642f8ccef9ed55
SSDEEP

3072:qNbLyRmFeiI0bSSkeD5+hzCITfqjsFEEbhUpWy:qwMvI0b7keQJfTfqjsF1Up

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8797bdfc0308353872a160f8e5362c8f_JaffaCakes118

Files

8797bdfc0308353872a160f8e5362c8f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fdbfec85672f73d2a4d49635454936d4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
LoadLibraryA
ExitProcess

user32

MessageBoxA

Sections

.text
Size: 1KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 92KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 441B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ebwec
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.perplex
Size: 1KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ