b8fb79bcf0b729a0cac0bdabae9a1c07_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b8fb79bcf0b729a0cac0bdabae9a1c07_JaffaCakes118
Size

50KB
MD5

b8fb79bcf0b729a0cac0bdabae9a1c07
SHA1

9d3c3e58cb8413e6c39022acd7ce0825908ae5ff
SHA256

ebf218c31a6f0d49d4dcfa53192f703eeff367bb0a86df0832e28dac3294e931
SHA512

c760e2a40a5c2279b8fd3f91decaf50898cdb7a37555e5dec3b23d430c33b2c3839e2888047c4bb03e4d43d04d5bf9f124b53d65e610806bd716b4467014ca58
SSDEEP

768:x+EBAna9zUiW3KPsSp9mEUvi4sGOMdfOa10dd9Iz9IJNqDJ3EIt:Ina9xWE10KodfOlXI5PJ3E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8fb79bcf0b729a0cac0bdabae9a1c07_JaffaCakes118

Files

b8fb79bcf0b729a0cac0bdabae9a1c07_JaffaCakes118
.exe windows:4 windows x86 arch:x86

541160bce55bf5030f1053d9ca2f310b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

ExitProcess

Sections

.code
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.code1
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 39KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE