27671234fd5a6946151bfa9709f0e91a_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

27671234fd5a6946151bfa9709f0e91a_JaffaCakes118
Size

28KB
MD5

27671234fd5a6946151bfa9709f0e91a
SHA1

4e615db5d602f27b1e1ae3ee126598138bb0459b
SHA256

cda249f770ddcf2b5d23484721432f797522cbfb55bbc40ed9d5eeec7c1f3391
SHA512

d52565f233158aff9d4919ac59f97ea4348692938e76fa37090f2ea549d10401b6f8b1bff990bc31712117468fda4a0d6a45a423fbba09b85a9b3d0aae6b7213
SSDEEP

384:sO4ghMtZASq3hzb+zov4KPsTe8Oj63Z30INyq2rN/4Y75zXwm34AdpymF8DY:s2PhzSKTqe8O430Ih2r1xdwIPbF8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
27671234fd5a6946151bfa9709f0e91a_JaffaCakes118

Files

27671234fd5a6946151bfa9709f0e91a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

541160bce55bf5030f1053d9ca2f310b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

ExitProcess

Sections

.code
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE