b786ddc5c4e33357b0715530ea48c827_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b786ddc5c4e33357b0715530ea48c827_JaffaCakes118
Size

50KB
MD5

b786ddc5c4e33357b0715530ea48c827
SHA1

493a82526c7128f34412e44f547ea1b60b15cc1c
SHA256

c0b2d21fde6d95b1529b23c2adee0747c3e6f2ba75fe0b8892e23001ebb14692
SHA512

2bb050f72db1a34126e93421fbdf206a40732067162705e1c5f74a5e6b84ad25986f42066cfdfd289af47a7ad1f04eb55992b444835fd803f5181643d0f91a06
SSDEEP

768:2Bg6tgTosXGc7+pUjIqzcoaL2agwQCaGzTiNFHMODVOHh9rTV9dAGXWdkqK:Ag6tgcsXGMqUZ3aLwBCzWDgXPjdAvd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b786ddc5c4e33357b0715530ea48c827_JaffaCakes118

Files

b786ddc5c4e33357b0715530ea48c827_JaffaCakes118
.exe windows:4 windows x86 arch:x86

541160bce55bf5030f1053d9ca2f310b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

ExitProcess

Sections

.code
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 39KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE