e8c8f82cb08be216ad1d8c5b404e5a3c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e8c8f82cb08be216ad1d8c5b404e5a3c_JaffaCakes118
Size

28KB
MD5

e8c8f82cb08be216ad1d8c5b404e5a3c
SHA1

bfba189e067a51d227aa1eecaa431d0b1911e887
SHA256

987df7a489d6b7d9134519e19e6497e109d76cbaad921da8d3afaed6a19ee6c1
SHA512

6db67f8a3f7d1a006667d9a9d58f5e935083dca6e05b12fab5e5b35c165faf073093b8e7850f2fc1b4fbfc101a24de39d80f73fb6e35b7b5d703a88134bd235b
SSDEEP

384:17XpNtqUcZV9YzAdVv1bEtgEWQBK72ZqT6atnHFsy6JHmRb841KJ49otxzeY+FC:1LpNtqUaYz6Nb7XSO1nHFsrkHiccqY3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e8c8f82cb08be216ad1d8c5b404e5a3c_JaffaCakes118

Files

e8c8f82cb08be216ad1d8c5b404e5a3c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

15a40fc888a24c3586ca9563306e006f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
ExitProcess
GetModuleFileNameA
LoadLibraryA

user32

wsprintfA
MessageBoxA

Sections

.data
Size: - Virtual size: 648KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE