eef7e1d2a62d1715aa20a0fe4d145345_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eef7e1d2a62d1715aa20a0fe4d145345_JaffaCakes118
Size

324KB
MD5

eef7e1d2a62d1715aa20a0fe4d145345
SHA1

2e70a248710c810aea99369e6e92552c160117a8
SHA256

1ca3449eda6a8ac9272e92ba8b679eb7b3450227c26a8952c3748bc656cda9ed
SHA512

dac5ee6a58e07d9009526cb865e099aa4c8b7faf22a413c3d950983f8e5ef5a3ecfb4b3394ae53f62a72ac1771c0f9f4943e9e7ecdc1b3b077e7bf365b758cc7
SSDEEP

6144:0wRcucn1ji+OYnIKqXbqtEhxU4OJS+fwGKhd:0UanArHKwmihtcScE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eef7e1d2a62d1715aa20a0fe4d145345_JaffaCakes118

Files

eef7e1d2a62d1715aa20a0fe4d145345_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fdbfec85672f73d2a4d49635454936d4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetProcAddress
GetModuleHandleA
LoadLibraryA
ExitProcess

user32

MessageBoxA

Sections

.text
Size: 172KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.perplex
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ