c258f4b7fb16eead916e189d94555fbe_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c258f4b7fb16eead916e189d94555fbe_JaffaCakes118
Size

52KB
MD5

c258f4b7fb16eead916e189d94555fbe
SHA1

d0387d68d82ae2a84eef0ebca24006c0264261eb
SHA256

c654cd1e8f79d2284d18393adc1b7b4dccb9cc1295fe718a74a294c665c48e71
SHA512

756b8766f4d8144685746c3f08d783a7e1b470f77dc4a998ea5805fb8b34386ae4ce4957fd5305e6b68ce93f2330393d21b16cfc208ef549301810ef9d734788
SSDEEP

1536:ylgIRnUiuyWdBz6vunfY+44HYCYCb4SzIL5vls:YgIRnUpQIfF4cBYCb4DL3s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c258f4b7fb16eead916e189d94555fbe_JaffaCakes118

Files

c258f4b7fb16eead916e189d94555fbe_JaffaCakes118
.exe windows:4 windows x86 arch:x86

541160bce55bf5030f1053d9ca2f310b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

ExitProcess

Sections

.code
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.code1
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 40KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE