JaffaCakes118_7e79e08a581df76bc2a7abaf03123b8c | Triage

Sharing

General

Target

JaffaCakes118_7e79e08a581df76bc2a7abaf03123b8c
Size

162KB
MD5

7e79e08a581df76bc2a7abaf03123b8c
SHA1

80580437bc9a07c5f816b690c4d7430ad2d96f98
SHA256

48278fd9a563354b417e9b21241b59907470dfa98478409d50dd59111cbd72d4
SHA512

4eb4b8dd2adf558c3c1768cbcbd96921a62911f2a0c0b3959d017c117c5ce11c075fe067893f03c4539b5675729943037eb13b3005135696e7130fde459e9c98
SSDEEP

3072:WnJRlMMGYJ+ipesjoccP9r5l2z3ScxI10HZKYHOQBYWiuhdPn9I:WJhjqPpOWcxI10Hiuhd/C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_7e79e08a581df76bc2a7abaf03123b8c

Files

JaffaCakes118_7e79e08a581df76bc2a7abaf03123b8c
.exe windows:4 windows x86 arch:x86

c3841d4b633b07dfe8f1410bf3e14fc5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
CloseHandle
Module32First
CreateToolhelp32Snapshot
SetErrorMode
OutputDebugStringA
ExitProcess
SizeofResource
LoadResource
FindResourceA

user32

EndDialog
DialogBoxParamA
MessageBoxA

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 149KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ