eb9b03a776a327680543a3c3085aa000_JaffaCakes118 | Triage

Sharing

General

Target

eb9b03a776a327680543a3c3085aa000_JaffaCakes118
Size

649KB
MD5

eb9b03a776a327680543a3c3085aa000
SHA1

13ded02f8a3ce0ed2a81c0c6dfb1adedbcde89e4
SHA256

8decbff81fe33a0f2b9f037c87885bb6e5f1af2171a0a4471b2737b5c93aff1b
SHA512

8b0c8afc09550e243ec159184c43f7d0e52cac0c40812466fa7982cb5c89052987ff480bd82b8385cc43d5a27d63ba748708fc4c0a8bbdf9073ad05f867204e8
SSDEEP

12288:bN2EkJysKFyCYDkib34253mYCog78YZyYNPqIVtqacxI0yeIB:bNeJysKFmtb42EXog78CyMv3ncynn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb9b03a776a327680543a3c3085aa000_JaffaCakes118

Files

eb9b03a776a327680543a3c3085aa000_JaffaCakes118
.exe windows:4 windows x86 arch:x86

11da5cca76dce3b726c8bc1a82bb88ef

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA

user32

MessageBoxA

advapi32

RegOpenKeyExA

comctl32

InitCommonControls

shell32

ShellAboutA

mscoree

_CorExeMain

Sections

.adata
Size: - Virtual size: 880KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 67KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE