eb2d4afc5acaf062c39e97226988e338_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eb2d4afc5acaf062c39e97226988e338_JaffaCakes118
Size

297KB
MD5

eb2d4afc5acaf062c39e97226988e338
SHA1

645716dc7cb5b3ac26b43d7c37c8df772cce16c0
SHA256

28c898e7348129cd73231b9c6fd61363c1a4e0e6b250ea7584f60f4adaa479e6
SHA512

737c746a03979f9c7b022d33bb6a2c06a8779946018874a8fdad0deb5d13349f5d45c7edd378ff0c8667f35342d3131480dc74462965545929e5260ae6df3395
SSDEEP

6144:v/tYMvx/sbohM3zSA74n7K4zWpcm2v5qO:v/tYMvfhaSA7OK4zWVa5J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb2d4afc5acaf062c39e97226988e338_JaffaCakes118

Files

eb2d4afc5acaf062c39e97226988e338_JaffaCakes118
.exe windows:5 windows x86 arch:x86

8c167c5374d2407f9cb7bbe6f60ff4b9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
lstrlenA
GetFileTime
GetExitCodeThread

user32

PostMessageA
FindWindowExA

Sections

.text
Size: 194KB - Virtual size: 194KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ