55dc4ae704df567fba90582a2effcc16_JaffaCakes118 | Triage

Sharing

General

Target

55dc4ae704df567fba90582a2effcc16_JaffaCakes118
Size

56KB
MD5

55dc4ae704df567fba90582a2effcc16
SHA1

f66d7e0884c43546fb649b1eaa4f840ae77bcc95
SHA256

b778d76ebfdec1f375c7c6aac0be4550446a03a774a3b53177b0b074ada053a8
SHA512

5e1b2680151312ae90e15a4b340bbdb9b12c193997fa20d85664c7ab4d5dd68971e23e03973b7c7bb1d10da25d70ac97065febfc53545588c01e80cde367197e
SSDEEP

1536:y0/oP/QQAO8WUlr1C4VnkqpHLqSlAblvWI99lZnz:yP5AOmzyqprqZbl3Znz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
55dc4ae704df567fba90582a2effcc16_JaffaCakes118

Files

55dc4ae704df567fba90582a2effcc16_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fa225e54b763276d6b0fd2dfe65f8a7a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadModule
GetProcAddress

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ