f00712e16d44f391bbe5c240685ad48e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f00712e16d44f391bbe5c240685ad48e_JaffaCakes118
Size

51KB
MD5

f00712e16d44f391bbe5c240685ad48e
SHA1

c5338465358d2ef0ff95e128687cd8873c6f9904
SHA256

0ce4f82844f530bd485ca9250b7c7d9e6958f62eee04665022d65cd2fb342c5b
SHA512

69598d6987e3d6de71c667dab87da24cb12aca275d1f415bf3a9a7dc09fcb96d6db6a50940e57790f8fcbdc5014a01bfdd6a2751c6c7da8c23aac136d4b6370d
SSDEEP

768:ik3FUGyGFblTNyEQrKSC8TRt0kJkeuLbIci9n7nZJOWnEXPE8ihTftPkMGscngOf:ikdyQFi30WjebTslJYPEZbMgcngOj0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f00712e16d44f391bbe5c240685ad48e_JaffaCakes118

Files

f00712e16d44f391bbe5c240685ad48e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

541160bce55bf5030f1053d9ca2f310b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

ExitProcess

Sections

.code
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 39KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE