08357d6ee9c33715cbbfc62726256b63_JaffaCakes118 | Triage

Sharing

General

Target

08357d6ee9c33715cbbfc62726256b63_JaffaCakes118
Size

36KB
MD5

08357d6ee9c33715cbbfc62726256b63
SHA1

239bc89032dc7b7523bc20f1fee8585ef15ded6c
SHA256

ca6123c8d187497bfcf94694eb9502bb05cc8cf3fd3a542f3642b26dc9a63224
SHA512

7eab3ad594ec14991dcde5ec1ac8695a9e9d4b9392ac05b22731571fdba6bee80756ebf23bca1ccec5059a5e0670b930b5b77f639beab14c111cae11ea4a467f
SSDEEP

768:ViZdJzvHToJGRMiLQ8g+CCuvq60rGMSrsvf3qflRInq0bELbOBZJ1M:ViZd5HTQiPZ+4vfadRInwLCbC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08357d6ee9c33715cbbfc62726256b63_JaffaCakes118

Files

08357d6ee9c33715cbbfc62726256b63_JaffaCakes118
.exe windows:4 windows x86 arch:x86

aa1ca832e28e2c6a63685365c58b52b5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadModule

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ