e0667b68a0fc02958e7b015d20fbbbba_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e0667b68a0fc02958e7b015d20fbbbba_JaffaCakes118
Size

50KB
MD5

e0667b68a0fc02958e7b015d20fbbbba
SHA1

8b7d4abcc138152dbcda34047d05e2a14b2aad38
SHA256

75a02afc135bf0c2ab2ba8a9c17ab8c1ea40e0d29664d17ccc08713977352c7e
SHA512

0e91ca4f21503c610981a464efdeb9338903ace5357eda7ebf8ee19d8908d0c01aa988436ed7f26ff14a5b80d25224b2465c9ac37443920283fa3e80253d3205
SSDEEP

1536:xWp3fH23S/ut0tFjq/vWUWKKH2Rg9N4wL:eeS/ekjwWV2Rg9N9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e0667b68a0fc02958e7b015d20fbbbba_JaffaCakes118

Files

e0667b68a0fc02958e7b015d20fbbbba_JaffaCakes118
.exe windows:4 windows x86 arch:x86

541160bce55bf5030f1053d9ca2f310b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

ExitProcess

Sections

.code
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.code1
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 39KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE