c2764a4bf489208036196831352c7712_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c2764a4bf489208036196831352c7712_JaffaCakes118
Size

27KB
MD5

c2764a4bf489208036196831352c7712
SHA1

518f6f1363206a1d3a45953546633bcc1643154e
SHA256

5da12fa28a684dadeb729fe29b75f26eca98d056e4af065e94bb7c298e6d3285
SHA512

a123a272a4b5bee77c29ce01dbd2d21e6a14ae8699c6a85c922393e4b1dce3cea4768643680f6b9827b271cc0c8383b6d31a9b5d0f395380cdb3d307d22aa065
SSDEEP

768:R41wGyTMGCKl9x8dfA3SS9IftlxmNk3Q5512WrM0:RLGyTBDqfA36tC4c1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c2764a4bf489208036196831352c7712_JaffaCakes118

Files

c2764a4bf489208036196831352c7712_JaffaCakes118
.exe windows:4 windows x86 arch:x86

541160bce55bf5030f1053d9ca2f310b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

ExitProcess

Sections

.code
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE