8d5ed15e6e5ad585266090549af423a5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8d5ed15e6e5ad585266090549af423a5_JaffaCakes118
Size

112KB
MD5

8d5ed15e6e5ad585266090549af423a5
SHA1

b15b4a80c3fd1ca3f53daa759f55a8a6a6bfb7f6
SHA256

9b05fc838ab37ac9f466a6534cf2a69bb2a4e5e890c4609523231fea950990b1
SHA512

123785bacc13583e49800804c126e01cdfea6728be108bc0aadf8a6449b3eaa0156ccd01951b5f796198236889479a2b55fee667cf13f9e31ec0d2e621d33d7c
SSDEEP

768:68FJ7B9+v2+h7ensTiX7nNbdCXXX9FEigi+bRiTP:68f7B9+O+UnPXLCXXX9FEigrbRiT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d5ed15e6e5ad585266090549af423a5_JaffaCakes118

Files

8d5ed15e6e5ad585266090549af423a5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f06eccdaf486e931cb8ffffb3d13f50a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

GetModuleHandleA
ExitProcess

Sections

.text
Size: 512B - Virtual size: 114B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 174B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ