3f524eee7e908d38e657b17061ebbea7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3f524eee7e908d38e657b17061ebbea7_JaffaCakes118
Size

11KB
MD5

3f524eee7e908d38e657b17061ebbea7
SHA1

2e72cb6adbfa72027c2ccfb43c56cd43fb9c88f5
SHA256

3c6c9683009f8c9281f85bcbdcc852a0df55a681a77aca5e85493221d6775d19
SHA512

5315dea46fbc8f41652704115968ec32dd4e2ab86ba90f015f45f6cd5108c76f245c30024e8bfd25993e4f26a04b141239e0b78595511247033b948f3133bd73
SSDEEP

192:lU6mgM9KnENxcBWZMyTK1y+SsW8MTqMQJCsNzTsgL60Fdyc:lWuENJMyTQydT+Fhu0byc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f524eee7e908d38e657b17061ebbea7_JaffaCakes118

Files

3f524eee7e908d38e657b17061ebbea7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

63078ce196c5955257a6ebecd75ef114

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep

user32

CreateWindowExA
DestroyWindow
EndPaint
MessageBoxA
ShowWindow
BeginPaint

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 254B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 964B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE