effa5106d4225cb59c9dd0cd72de71e3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

effa5106d4225cb59c9dd0cd72de71e3_JaffaCakes118
Size

20KB
MD5

effa5106d4225cb59c9dd0cd72de71e3
SHA1

4d4a43340fba9025dd9e409846426cfcdbd9048a
SHA256

99861dff194e1e815b4715bb77fdcaa1bda554e9c3433728a32368a5c359f979
SHA512

1a1184f04dfb4d71e668d4dea2cacadd29d65ce2158045e22533b1b4221b44f46f913a2bce983646a4fa690d2f8dc22def4ca711db334f5523844ebe6d0fdc42
SSDEEP

384:DSlgQcaIoqpDgg7SUse81A6PyU6eDbkUHKD7wDShXYEuK8c:Ltg7Ua1A66ADbtQwSt/uLc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
effa5106d4225cb59c9dd0cd72de71e3_JaffaCakes118

Files

effa5106d4225cb59c9dd0cd72de71e3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

541160bce55bf5030f1053d9ca2f310b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

ExitProcess

Sections

.code
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE