c83f54bd31789072cd0d5f1063af8490_JaffaCakes118 | Triage

Sharing

General

Target

c83f54bd31789072cd0d5f1063af8490_JaffaCakes118
Size

20KB
MD5

c83f54bd31789072cd0d5f1063af8490
SHA1

d655031c770127fe4305fc09c0779a1bc2e8cc4e
SHA256

d5a4b3d3ca3262f73e73b3682a24965e14cf6461cb38ec82c10904c76b549e13
SHA512

14fde70b400698bbb6ada9157cb2bf3329863afa0d14e7dfa76e5d531879d838d176ae524684420b4fa04347c9b234581ef92682b9c53e642197725fbc1b49d7
SSDEEP

24:OEhu70LwbpwZmNfGpG2oqtRcjX9W/jiRgxnSpfFbZG4LBap:OEPLwTNyG2oqPcjX9WriqS7VBa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c83f54bd31789072cd0d5f1063af8490_JaffaCakes118

Files

c83f54bd31789072cd0d5f1063af8490_JaffaCakes118
.exe windows:1 windows x86 arch:x86

e95c56ba5b13e8c0717199a13a38b879

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

user32

MessageBoxA

kernel32

OpenFile
ReadFile
ExitProcess
CloseHandle

Sections

CODE
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE