ce1b218a2818a060f94f4773785e3773_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ce1b218a2818a060f94f4773785e3773_JaffaCakes118
Size

50KB
MD5

ce1b218a2818a060f94f4773785e3773
SHA1

37ea15c41be828c16b89769eedb0af542bb2b447
SHA256

1d43e0d53bd4d070c6148376f27e538316c4dfbec1128616740c129b681719b1
SHA512

33e5f84c1f01f0da04e43b6d2d132676785bf7d07109d9330365120ff408603a52ef1d64128d26dc021ddf5654a30068de50c0ed2430e6064c6d30cfa48cb05d
SSDEEP

1536:J8g0DrSp2du32bn/ySTOUBd5UVuJMfYQJ:oDt3n/yK9BbUwJEYQJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ce1b218a2818a060f94f4773785e3773_JaffaCakes118

Files

ce1b218a2818a060f94f4773785e3773_JaffaCakes118
.exe windows:4 windows x86 arch:x86

541160bce55bf5030f1053d9ca2f310b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

ExitProcess

Sections

.code
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 39KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE