ebeca8d98a5acd96ce3dbdbb9f0104db_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ebeca8d98a5acd96ce3dbdbb9f0104db_JaffaCakes118
Size

220KB
MD5

ebeca8d98a5acd96ce3dbdbb9f0104db
SHA1

5df31a9fe6fe05c44c77ecc13f1ae556772155a3
SHA256

58c0f67e093df4b908fb4295e97456b49b8ee528eb1f4678e4ec6644634dcfbf
SHA512

41a9665ad87c14a63bb8d33358ad9ce5a5c25fb4c1fb86d2135eadb2459a658e8ad3a16405f02bab253750724f9d036710adea6b0b11305898edae8da41f1684
SSDEEP

6144:lF96b6jKcN/GjsSiV1SviXnpUCh29F2WG6M:lFk2jPrtSi3pkiP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ebeca8d98a5acd96ce3dbdbb9f0104db_JaffaCakes118

Files

ebeca8d98a5acd96ce3dbdbb9f0104db_JaffaCakes118
.exe windows:4 windows x86 arch:x86

de39dc68941cc6307e3b2590c857a907

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_SYSTEM

Imports

kernel32

GetModuleHandleA

user32

wsprintfA

advapi32

RegCloseKey

ole32

OleRun

Sections

.text
Size: 83KB - Virtual size: 248KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.adata
Size: 59KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.newIID
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 68KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE