e268cfbc355abfe9ed6d9267eeae903c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e268cfbc355abfe9ed6d9267eeae903c_JaffaCakes118
Size

571KB
MD5

e268cfbc355abfe9ed6d9267eeae903c
SHA1

79c79951e4165e384cadb5079ed07b9668afa768
SHA256

0eb59e29656331997db5fbd794df64fe3d40e0dfdb50d50d0ab5841868eb040b
SHA512

0fdd64675d2c002a0e299046c8d8784b7b9ab13ef52ecedb2e18916b99a00fa234873f032d430c6d02d93879f73b4c83789b1eb76d8202653b2a660fdef1410d
SSDEEP

12288:CKLwTQE8QHCjoMXPf/ZdWZInynv3uO9bbor5gP5qf:5wTeQGXPfhd5nyP/ArKP52

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e268cfbc355abfe9ed6d9267eeae903c_JaffaCakes118

Files

e268cfbc355abfe9ed6d9267eeae903c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

46b0675c1fd7681c7b19a1c83d5aff83

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
ExitProcess
LoadLibraryA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA

user32

wsprintfA
MessageBoxA

Sections

.data
Size: 554KB - Virtual size: 784KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.asprsc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ