eb918419c4180223274efe20950f521e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eb918419c4180223274efe20950f521e_JaffaCakes118
Size

9KB
MD5

eb918419c4180223274efe20950f521e
SHA1

f0319053f5854a3b10f97ac1993a62a27e8603e2
SHA256

9b95d5e3d4929a9e488007dfd2beaca1f857a7fed301e3ebb3d5b1a4621d81e4
SHA512

f611ab1de69435a289233079cea9e3e0853cfeb01f718e1fd760224e0ea6f785938c605e8e034b191d1da8f0946bef0df357cb3ddb1ec539086b004d072b8618
SSDEEP

192:owX6TpeK+JbUex2xXF2jUvIDY1y2A4cYKJ49ooKAAB:JX6FeNJxO2UAj2A4XKJ49oVZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb918419c4180223274efe20950f521e_JaffaCakes118

Files

eb918419c4180223274efe20950f521e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

c0ca8fb524d53a294a75f3adfde9e816

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
ExitProcess
GetModuleFileNameA

user32

MessageBoxA

Sections

.data
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE