fbbf6f285bc35f6bc67164d73848e68b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fbbf6f285bc35f6bc67164d73848e68b_JaffaCakes118
Size

51KB
MD5

fbbf6f285bc35f6bc67164d73848e68b
SHA1

0cae953d18ff6aa5b6e153ab5ea364e3481d6ced
SHA256

49b75d07d1c975b4e324dffd821c333a91206d03ec960fd5bb8e8bc99bded159
SHA512

184b3d86d8fd8662a5e563cde30a956e6e6bb1d8a6616675f47d3c69150772b6da2a7c36981efd8deb87c3511767c97b1ffa0f27e74d2b88482a9b063cb65567
SSDEEP

1536:yK46/R9Kvp5SCXIAYExykxFV5lymVzfIO:AKR9qp5pIJEM2FVpd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fbbf6f285bc35f6bc67164d73848e68b_JaffaCakes118

Files

fbbf6f285bc35f6bc67164d73848e68b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

541160bce55bf5030f1053d9ca2f310b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

ExitProcess

Sections

.code
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.code1
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 40KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE