8d9f344aa8eb2a1c2bebd9308d3edcff_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8d9f344aa8eb2a1c2bebd9308d3edcff_JaffaCakes118
Size

14KB
MD5

8d9f344aa8eb2a1c2bebd9308d3edcff
SHA1

d7611374f1c251e8d9ac6eb882896b80fe0349ca
SHA256

b78a6a23ffa756e1f79c8cde3509466185187a43376035426af283216e40c8bb
SHA512

f93adafa0b4c4b01fc7e8196f20a28d29467b7b372c9f929c04656831bf5d54cb78ddbc1dfc86dfd404a0fe338ae2225af4f3596a4982538db9cfb736344126a
SSDEEP

384:yxPxZs/bUUMJK9K/keRGpNq70E7lajn6QqFA7KaK4:ePc/oTJK9H+vlaj6QqoKa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8d9f344aa8eb2a1c2bebd9308d3edcff_JaffaCakes118

Files

8d9f344aa8eb2a1c2bebd9308d3edcff_JaffaCakes118
.exe windows:4 windows x86 arch:x86

541160bce55bf5030f1053d9ca2f310b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

ExitProcess

Sections

.code
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.code1
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE