JaffaCakes118_23546cf9becb2f1e8e9e276959fc194e | Triage

Sharing

General

Target

JaffaCakes118_23546cf9becb2f1e8e9e276959fc194e
Size

154KB
MD5

23546cf9becb2f1e8e9e276959fc194e
SHA1

67d25bd36fe948b8c815750431236547c490757a
SHA256

c46ac9fb12044a383581ef0a1029c67860012d2137bb1b3163a53976a7094c41
SHA512

b1373f8d60c200089a2fa25176759cfeb06114165e080ed417cb7b36ada5df3ea0b14e7d914f5954317fbfdb54b8ffceb63e1fd9cae34b2c029693eec93103f8
SSDEEP

3072:pz7gJv8sqT6MM6MMMMMMMMM2kD+ipe9yB8vbk9T7QM65aqHVHN148jd3Aa0k4Poh:pz7aYNyBYA1Y148jd3Aa1X2dc53J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_23546cf9becb2f1e8e9e276959fc194e

Files

JaffaCakes118_23546cf9becb2f1e8e9e276959fc194e
.exe windows:4 windows x86 arch:x86

d97d17d9a641a3b5a61211b49db88104

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
CloseHandle
Module32First
CreateToolhelp32Snapshot
SetErrorMode
GetFileAttributesW
GetModuleFileNameW
OutputDebugStringA
SizeofResource
LoadResource
FindResourceA
ExitProcess

user32

MessageBoxA

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 514B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 142KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ