08ec4be8f635030ebb0849b64bf3a661_JaffaCakes118 | Triage

Sharing

General

Target

08ec4be8f635030ebb0849b64bf3a661_JaffaCakes118
Size

47KB
MD5

08ec4be8f635030ebb0849b64bf3a661
SHA1

b2957475d9ba953728208401da3d7c2f545e9d64
SHA256

db382b247719b5fe61d65bda53e6381c59c6dd83d2df930d6cca2a37274e91dc
SHA512

580ef5d2899307cc0c3d3f35564c0e664a6b09d59237c636ad539f36675b4edeefa3747168ff0009bc8f6ac303729da2312c5239b520e8c314869f0492605a63
SSDEEP

768:u8qpPJMu3L4cVsLJt59L/R3sjUAMevfhLcvRKLjpUVF3xU6dVsMGKGyp6:uvxFb4KsLXdsUifhLcgPpUHGMFp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
08ec4be8f635030ebb0849b64bf3a661_JaffaCakes118

Files

08ec4be8f635030ebb0849b64bf3a661_JaffaCakes118
.exe windows:4 windows x86 arch:x86

854c2339345e97ada0b01aaa4d31c080

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetModuleHandleA
GetProcAddress
LoadLibraryA
Sleep
VirtualAlloc

user32

MessageBoxA

Sections

.text
Size: 512B - Virtual size: 494B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 264B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 256B - Virtual size: 73B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.cdata
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE