d0be74109fde5efe7c2734eef9fb528a_JaffaCakes118 | Triage

Sharing

General

Target

d0be74109fde5efe7c2734eef9fb528a_JaffaCakes118
Size

637KB
MD5

d0be74109fde5efe7c2734eef9fb528a
SHA1

79bbbc0db8566cb055398cb6146cae67ce56b63f
SHA256

341a471472a9804929b564aa2c99db7f88e5f985123f3cc4326001c17df46608
SHA512

5ddb706eb4b7a470f5c93c50a9625b7ef3f2d5e0ccf99b1d010da5b7914a17e3f9372241a436d3686d54fca6269c810fbf52b1ea57eb753e9efc5da00f19e980
SSDEEP

12288:Nv4CmqQFfkNmjsZNxeXBf8QF8bge0EGi0AVKoh+N:a8W4858WX7EGpoh+N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d0be74109fde5efe7c2734eef9fb528a_JaffaCakes118

Files

d0be74109fde5efe7c2734eef9fb528a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

aa1ca832e28e2c6a63685365c58b52b5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
LoadModule

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 293KB - Virtual size: 293KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ