b59c2f6778f77daa3ae8183cf6528063_JaffaCakes118 | Triage

Sharing

General

Target

b59c2f6778f77daa3ae8183cf6528063_JaffaCakes118
Size

596KB
MD5

b59c2f6778f77daa3ae8183cf6528063
SHA1

5b4fab588b487510b987b3ad63eb522868001a39
SHA256

7cc9c8a7f9b802223e6f9c7781ec4651825d0071a456d67f2637d689ba68e778
SHA512

a6a9adcab60920cf924eece132e1ce10b73cd0f6b654baed2cc8999187d804b282cd20a3a4a9294b9e92740e2064446221deb3bd7cc2e4ad4630ff257f710418
SSDEEP

12288:W4JX6Xji1LUFQRKRHHDnTys6iZ6k7KOQTYpIGDZBB8ZrvE3QpMK9HxSsWZG:zgjaHR6/yFk4ps22QOISzE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b59c2f6778f77daa3ae8183cf6528063_JaffaCakes118

Files

b59c2f6778f77daa3ae8183cf6528063_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fa225e54b763276d6b0fd2dfe65f8a7a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadModule
GetProcAddress

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 538KB - Virtual size: 538KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 35KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ