e2bc8898f1bce65cf957a3eb3186052d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e2bc8898f1bce65cf957a3eb3186052d_JaffaCakes118
Size

31KB
MD5

e2bc8898f1bce65cf957a3eb3186052d
SHA1

db68e027a8cf6695f852010356b53076c79bec8d
SHA256

ab996cf4c4cefc928b96f645cb9b8fbcfbff09778eae70221fc0d333ca7c4b0d
SHA512

fd76bb837e21c58109bf632e910ca795717fb3e2f8bb5bda40272b33846d01c1ef4ef465437f64b5f1d0586d40acb75ffb161aca6101d34af2f22a38e88deae2
SSDEEP

768:r0xHh5ExalDfaTLWK12XDDT2QgtgHoXGqqAtU4Sz4:AxBCglG3V2XfUNXGqUz4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e2bc8898f1bce65cf957a3eb3186052d_JaffaCakes118

Files

e2bc8898f1bce65cf957a3eb3186052d_JaffaCakes118
.exe windows:4 windows x86 arch:x86

76ad44d6d67d3d82e55350e3f753add3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessA
GetCurrentThread
GetStringTypeA
IsBadCodePtr
CloseHandle
LocalHandle

Sections

CODE
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 966B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 24KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE