ea686a4aae1062590895512bdfc2343c_JaffaCakes118 | Triage

Sharing

General

Target

ea686a4aae1062590895512bdfc2343c_JaffaCakes118
Size

373KB
MD5

ea686a4aae1062590895512bdfc2343c
SHA1

2351e9fb799d9fc21bbd1d88a5b7e710b5824419
SHA256

ecee636d1726de2102369e760d093d10f621d9b8c02cd4074271bed696c0472e
SHA512

141205607bd4aa9460503ecf154c88e7bda7235f1ce1c8c60623f5bd4792d8de10de265c012072a6736f8c1ce3d2f7c4b8563382f0492633c08c5863e284830c
SSDEEP

6144:WR7EUhRp0e7iQ9V+VJwOKWzUQ03221hvdr7WDg5JlXtm0kPT/ZyLnRugnGEZvmU:xUzpFOr3L9zUQ0GwvR7Olgox4vmU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea686a4aae1062590895512bdfc2343c_JaffaCakes118

Files

ea686a4aae1062590895512bdfc2343c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

46b0675c1fd7681c7b19a1c83d5aff83

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
ExitProcess
LoadLibraryA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA

user32

wsprintfA
MessageBoxA

Sections

.data
Size: 362KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.asprsc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ