a09cedd87f3396f1af2b103412437166_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a09cedd87f3396f1af2b103412437166_JaffaCakes118
Size

50KB
MD5

a09cedd87f3396f1af2b103412437166
SHA1

dae769813d0e14fbdf0516094ee41095cb442bbb
SHA256

e159c4f8a62cf61c16cdf2dcd03b3016d7e8b2a90c844ed64f2e3fb41f4751ec
SHA512

5249ce1b2b2cb1040f854ac102d453f11f7c76291c318a70cd36b21bba633cc5ed6ae47de8d0c98cea4e9549f01cec27d4fef53d051f69a0f4e40c389540c521
SSDEEP

1536:KOK2uBq8El3OlP+oyjDbvugL8Gd4UTcrwE2jCi4Khu:o1cl+l+oyHKgIG6U4rwExi5c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a09cedd87f3396f1af2b103412437166_JaffaCakes118

Files

a09cedd87f3396f1af2b103412437166_JaffaCakes118
.exe windows:4 windows x86 arch:x86

541160bce55bf5030f1053d9ca2f310b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

ExitProcess

Sections

.code
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.code1
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 39KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE