eb22b468e1176097acce915dc024ced0_JaffaCakes118 | Triage

Sharing

General

Target

eb22b468e1176097acce915dc024ced0_JaffaCakes118
Size

104KB
MD5

eb22b468e1176097acce915dc024ced0
SHA1

84a94af238500a79048f48e4053cba23cdf1f23f
SHA256

a20301fab4ff878e790701ab3d2e5a6901e0d718608da46d5ab3d80f70eef262
SHA512

fd83a576a27c8d6f447964eb0881120b5b4d6192faf5a1f456d3eebbeaa57b6f47693cb84441a21f2db1a959bb0920700f549afb068ff47dddcd5a0c1caef9d9
SSDEEP

3072:6EbZT1pyBd5uhGq5nA7wgQmlIY6U482h:bZjSuhd5nA7bRI582h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb22b468e1176097acce915dc024ced0_JaffaCakes118

Files

eb22b468e1176097acce915dc024ced0_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2928e0fa0ba4c66b5cc7137c2ae93f1c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

Sleep
WriteFile
CreateThread
GlobalFree

user32

CopyImage
EndDialog
GetFocus
DialogBoxParamA

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 95KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bbs
Size: - Virtual size: 149KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 430B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: - Virtual size: 179B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ