d6161d729217cd2a6983ef32a8020631_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d6161d729217cd2a6983ef32a8020631_JaffaCakes118
Size

68KB
MD5

d6161d729217cd2a6983ef32a8020631
SHA1

c8056ebe061fcc8a9e1d819ce6c6337a6d13ce5f
SHA256

68b4617df580e51f78ceec845a7834229f2fb3739e0f71c3cbc0aadb0920cc4b
SHA512

246f3808d12db5f0e6c6a742adcf7953e45879a2c6970016bfdaca4cdb61f60ecfaede142e9bb4517990e46bfaf9a2f373f699c4d738563ae1f082da580c40be
SSDEEP

1536:4jrnJ1KXI4dI2bZtXH3aYRwr30Fpb+4D5K3TPVX:4iXI49bZhH3bCcpS4g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6161d729217cd2a6983ef32a8020631_JaffaCakes118

Files

d6161d729217cd2a6983ef32a8020631_JaffaCakes118
.exe windows:4 windows x86 arch:x86

aa1ca832e28e2c6a63685365c58b52b5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadModule

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 192B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ