eb6a8205e842e0b0680d22ecaefb1c7a_JaffaCakes118 | Triage

Sharing

General

Target

eb6a8205e842e0b0680d22ecaefb1c7a_JaffaCakes118
Size

122KB
MD5

eb6a8205e842e0b0680d22ecaefb1c7a
SHA1

815d3b29f0da3b80b4030b733b0a679224a230d7
SHA256

929c58ed81fcacb23e384e911070e4c412fed3842abf3f605b07a5d1dadce9d7
SHA512

852286de0029f05bd5780f620e113559e53e96a8f705e3142e10a1106e0bd6276f152ddedf1505ec13a66c837601293c27796d995bceab4c538d87734b63c51d
SSDEEP

3072:EM8W+F35WIkgqzvXu+3cH8MVqqZno/tpUQCbpppppeZ:y9F35WhrXunWtpFCbpppppw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb6a8205e842e0b0680d22ecaefb1c7a_JaffaCakes118

Files

eb6a8205e842e0b0680d22ecaefb1c7a_JaffaCakes118
.exe windows:4 windows x86 arch:x86

014f65d9b65c5219395f6fe276e518b1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetModuleHandleA
FreeEnvironmentStringsW
CloseHandle
GetLastError
GetThreadLocale
GetProcAddress
FreeEnvironmentStringsA
VirtualAlloc
LoadLibraryA
GetEnvironmentStrings

user32

GetMessageA
TranslateMessage
DispatchMessageA

oleaut32

VarRound

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ