eb8acc0ca9542fb501658d58cc9b52fd_JaffaCakes118 | Triage

Sharing

General

Target

eb8acc0ca9542fb501658d58cc9b52fd_JaffaCakes118
Size

84KB
MD5

eb8acc0ca9542fb501658d58cc9b52fd
SHA1

a6f82c335b55ac912a053d4480cd09940bfb9dc4
SHA256

7dd172fda81cd6767cecb233256923614d8922b8adb2e442134b6c26c5bc86ab
SHA512

05aac3e87b77f771902835b852ef1f3489616c563c2f0bfae8d0d868a44fd1566bfde6d0116b501139fb4b96527fa3f4c8fbc9b0f7750099c7f8df5d957b5ec1
SSDEEP

1536:LTgEVoPf54tuylLoLz0B4CMpdIrE0amyndR+lyWd6MMn/4/:vfVoPmB0LwB/CIramydRcyWYMMn/K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb8acc0ca9542fb501658d58cc9b52fd_JaffaCakes118

Files

eb8acc0ca9542fb501658d58cc9b52fd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a59ed098b58cfdb7a9853d06406c5ca7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetProcAddress
GetModuleHandleA

msvbvm60

ord516

Sections

.MPRESS1
Size: - Virtual size: 176KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE