8e568220ab7f2676d4f42c1a885ebc68_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8e568220ab7f2676d4f42c1a885ebc68_JaffaCakes118
Size

265KB
MD5

8e568220ab7f2676d4f42c1a885ebc68
SHA1

aeefcc1142e6679ca18f6c895576a95294b76ae1
SHA256

02a37b52d8a416e2de2c02fc4778c76b879931b7f46bdc589b186074fa31216f
SHA512

293ca956601a920983f5ffdf1a26138e73664f188dcf0d8a8b4c6f41d5d8f662493484d5a5e54559d3072cc89106d04eb13f8cd365ef1823b74605272af8d06a
SSDEEP

3072:yrKIxLmy0GgX+nlg0KPtsUoKyH1pzP46Ye0m5n1QJadm8/nggmCp5nWm5:um3ZJPOUM7zP4te0mJ1QJrTgmCpMG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8e568220ab7f2676d4f42c1a885ebc68_JaffaCakes118

Files

8e568220ab7f2676d4f42c1a885ebc68_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5f28a7cf53e4f3ff43faf541817c6340

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

ExitProcess
SetFilePointer
ReadFile
CloseHandle
CreateFileA
GetModuleHandleA
GetProcAddress

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 290B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ