eeca25b06feee6ceb763005bf72a05e3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eeca25b06feee6ceb763005bf72a05e3_JaffaCakes118
Size

71KB
MD5

eeca25b06feee6ceb763005bf72a05e3
SHA1

2c10122306f7db947ac1e306c8f7b915e5a30bbc
SHA256

a50916871a623b4463e591ab3d521f5908c68ccb948a7fb864fe9a7098b1f613
SHA512

df04050dd2bf9b69ff3658c808af9621a1df322bd66152f6d07d2852407229ff8a0ab3914f64059153be8165d741dc83381e11b0b167ca9f5b163d2a6f948b25
SSDEEP

1536:aDW9g2Y1A3I4H517adPfEiwb8G8JmO/wfur4raXqY9AAPlhpt6:Rg2Ya3I4nafC83ofur6MF93lh6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eeca25b06feee6ceb763005bf72a05e3_JaffaCakes118

Files

eeca25b06feee6ceb763005bf72a05e3_JaffaCakes118
.exe windows:5 windows x86 arch:x86

5a188d99b71a7cc79e84b924d39b72fe

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
GetCommandLineA

user32

LoadIconA
RegisterClassA

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ORNU
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 400B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 540B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ