ec07185df63d013bd935d2d0b5e512b2_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ec07185df63d013bd935d2d0b5e512b2_JaffaCakes118
Size

432KB
MD5

ec07185df63d013bd935d2d0b5e512b2
SHA1

8536159fa845c03e763d644edd2369b21c6950de
SHA256

51754e64145edfc45f49b9b14a1907d3d5dc8dc0097b37c87bc706ed5d968d77
SHA512

3499cbc4a3a49b7dcbcd23af51b4fffb9efd29e3b7f014d3db104779ff6265017406f5b6d198d38767ddd22eb6cd74881d117320c9671a857b9362794ac7fda1
SSDEEP

6144:pxg9WqrP4gSxi2CktQdcs3KovK5BMfo1RVO3YSGQCMUiIV0gYv03z5qq4i28HJ:pDOeErLFvCMERmgKu3N2A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ec07185df63d013bd935d2d0b5e512b2_JaffaCakes118

Files

ec07185df63d013bd935d2d0b5e512b2_JaffaCakes118
.exe windows:5 windows x86 arch:x86

22deaa3e5166e3019a02358581c9a9ee

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

_lopen
ExitProcess

user32

MessageBoxA

shell32

ShellExecuteA

Sections

Size: 34KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 1024B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 339KB - Virtual size: 340KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.svkp
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RCryptor
Size: 79B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ