13182289bb386457ab2c83eb955ea4b3_JaffaCakes118 | Triage

Sharing

General

Target

13182289bb386457ab2c83eb955ea4b3_JaffaCakes118
Size

408KB
MD5

13182289bb386457ab2c83eb955ea4b3
SHA1

f370624228ba552f31e9894a8c056cf208b7f66a
SHA256

bd0af7092a4230a746b0e02858bb1b37a1c6fbcb8e06e91003f326e49e1330f8
SHA512

22bf54bf8e862b3a57c2c6dddeadda3a2ae11bfed1e5826792ab46c139d65fd4fec7e84d9d2ad6ac37146e7c18868e1fa67501b3a6da4acb09985ceb14f26492
SSDEEP

12288:LD3NF4Bs/Xsgvr6AAbE34OfpPJ0FU4/ULtUD9U:LD3jOs0A9qELfBSF7/ULtUW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
13182289bb386457ab2c83eb955ea4b3_JaffaCakes118

Files

13182289bb386457ab2c83eb955ea4b3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fa225e54b763276d6b0fd2dfe65f8a7a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadModule
GetProcAddress

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 258KB - Virtual size: 258KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 144KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ