a5274a8c28df285feb280bde09eed779_JaffaCakes118 | Triage

Sharing

General

Target

a5274a8c28df285feb280bde09eed779_JaffaCakes118
Size

67KB
MD5

a5274a8c28df285feb280bde09eed779
SHA1

3e9027acfaae09e0a7b9601ea3f327a05f68d1d7
SHA256

4717270bad99c9e27b10a149ac4aa8d470add0c9200ef8797ebc7b14eded9dcd
SHA512

362bf5165e1938163ab0f621cb95079fa12efe921c72f379f1f38c9585d02668f5b824fb5e86211b189af02aed5e01c9bf67828fa455e09b6ad3c4b5b7103d19
SSDEEP

96:mPIUVe9gNZGsPhi2zmcamu6xy/c8NnFBHgwtxlpmzo4zGUkhIxSSFLY5Ui7J:mQUc+Z1I2zRC6oNnfHgG22hIxvY5Ui

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a5274a8c28df285feb280bde09eed779_JaffaCakes118

Files

a5274a8c28df285feb280bde09eed779_JaffaCakes118
.exe windows:1 windows x86 arch:x86

105732f0c6968ac8bea2b4476eda4263

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

user32

MessageBoxA

kernel32

GetProcAddress
GetModuleHandleA
ExitProcess

Sections

CODE
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 61KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE