ad10cef6ed97d64bbb9792a168815ddb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad10cef6ed97d64bbb9792a168815ddb_JaffaCakes118
Size

50KB
MD5

ad10cef6ed97d64bbb9792a168815ddb
SHA1

b05d3c107b5045a14c5afd3ecfd81e9dc5dc445c
SHA256

9718eca1ddb5b37cbe5fb40d600968ae38e470a12602a1656c5670c5b73bb2ad
SHA512

eea1259adcc33e83bfe7025cefe524ae1d7cc4720a8ebc547b52231b80c853aa56711264608b9ea9d642e63522a5e2c65640785c691d7b0238a3a35a657087be
SSDEEP

768:5N6oSDBkSXXG2jUh+ykAGY+flaPOqvBQrHubtGi9srbGc5yru5:5dStkSmphzVGhaP0rOboqay

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad10cef6ed97d64bbb9792a168815ddb_JaffaCakes118

Files

ad10cef6ed97d64bbb9792a168815ddb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

541160bce55bf5030f1053d9ca2f310b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

ExitProcess

Sections

.code
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.code1
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 39KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE