06eb96d50bfc6c660ecbc4be834dbc28_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

06eb96d50bfc6c660ecbc4be834dbc28_JaffaCakes118
Size

35KB
MD5

06eb96d50bfc6c660ecbc4be834dbc28
SHA1

34af213ff54a7db244b33a36b26406e09443fac7
SHA256

d4605076ef5a538cad1a63b20343c1b519e4a5d8802dd3f9e2e346f9f0ebb56f
SHA512

df93b0aa8e375b38f6f421800c062951186f97ffdc381a942ce7641f43508ec992d8e8765868cf6755e7903066d1f9f0267b4ca0211d2c69904c701026a5f552
SSDEEP

768:7t+oTmkFKN2pgHt+ldEw6QvbE/9hZ+WQB2AhKZ0:lmiKNoxE/9WvE0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
06eb96d50bfc6c660ecbc4be834dbc28_JaffaCakes118

Files

06eb96d50bfc6c660ecbc4be834dbc28_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ccb1090981838bf435f899d4ec8b6866

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

crtdll

??2@YAPAXI@Z
malloc
_exit
_XcptFilter
exit
_acmdln_dll
_initterm
__GetMainArgs
_commode_dll
_fmode_dll
_global_unwind2
_local_unwind2

kernel32

GetLocalTime
_lopen
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
LoadLibraryA
GetStartupInfoA

user32

MessageBoxA

Sections

.text
Size: 1024B - Virtual size: 781B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 672B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ