eb6cee645b891152e590003a7b5488af_JaffaCakes118 | Triage

Sharing

General

Target

eb6cee645b891152e590003a7b5488af_JaffaCakes118
Size

294KB
MD5

eb6cee645b891152e590003a7b5488af
SHA1

cf4dab806a2637895ccf561f3e6f03aabe3c81fb
SHA256

f5884da1b4d993a44f096f40046cb92003102c503bdfeafa44daefb3870ed203
SHA512

a744a70cb3acb29d52f3db60d3afe55882806253562e0f183a5f8d847183a8d8108fe40916a3a8bbfd08b607f9c9ff8e7d1b8ddb72a9d61a7f630faa52b94ccb
SSDEEP

6144:au7QnX+IJ+ApePUAzmWGF/+vBJwWR7fnBROp2SV1/s2zdHdVUSywBt3hn:OnNJ+8eUCAwweLBmV19KMBfn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb6cee645b891152e590003a7b5488af_JaffaCakes118

Files

eb6cee645b891152e590003a7b5488af_JaffaCakes118
.exe windows:4 windows x86 arch:x86

aa1ca832e28e2c6a63685365c58b52b5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
LoadModule

user32

MessageBoxA

Sections

.text
Size: - Virtual size: 708KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 259KB - Virtual size: 259KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ