be116ee37ec7baf36ce26fc0ce2ba810_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

be116ee37ec7baf36ce26fc0ce2ba810_JaffaCakes118
Size

104KB
MD5

be116ee37ec7baf36ce26fc0ce2ba810
SHA1

c3dde656401125d81c677de6dcaa8ed8a6fe4986
SHA256

6bb50a02848af43778d0a3652d7b91a61610f8b8db719ac3e2a7f7ba3679e945
SHA512

140284051122091220880030d2d8048dd3e047b1c60ce38f74aed4c369c0dc93990acc8a4f2131aaed5339c0abe96fe6580b078ff6a09ef3a2e765b80674436e
SSDEEP

3072:w/MTkgpofonq996UdMN7FK0wltEpe7pBXY:w/M95q9963NFK0MEwnY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be116ee37ec7baf36ce26fc0ce2ba810_JaffaCakes118

Files

be116ee37ec7baf36ce26fc0ce2ba810_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0ad094b66f36e5686c46c3e49ee980b3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
EnumDisplayMonitors

kernel32

GetModuleFileNameA
lstrcatA
SetFilePointer
LoadLibraryA
CloseHandle
CreateFileA
ExitProcess
GetModuleHandleA
GetProcAddress

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 374B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ