ec0ca291d196fa5b6010456cb16b89fd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ec0ca291d196fa5b6010456cb16b89fd_JaffaCakes118
Size

259KB
MD5

ec0ca291d196fa5b6010456cb16b89fd
SHA1

4e469f6fcab2f32a84b105a1d37eb8258268865f
SHA256

dcaa4db2b1b86036db93c808d731cad5d602d21f574f3fd409d77af1942df38c
SHA512

3e5b89df5d83bf925685d016125d60da22add18808decd6357fd660df539db6b5164552d754cbcc971f36b84140d2bb0207f33934e307e38f7f0354fc4959afd
SSDEEP

6144:qTRrMIcoJqF1rZJOC9beCjZ7iE1HJh4GKTTeVBt3hf:qdAIcWojOm197h1HEaBff

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ec0ca291d196fa5b6010456cb16b89fd_JaffaCakes118

Files

ec0ca291d196fa5b6010456cb16b89fd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

aa1ca832e28e2c6a63685365c58b52b5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadModule

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 540KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 211KB - Virtual size: 211KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ