e2cac040e8817b8df04652d06e173b4e_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e2cac040e8817b8df04652d06e173b4e_JaffaCakes118
Size

71KB
MD5

e2cac040e8817b8df04652d06e173b4e
SHA1

6d355b7756950afb62cb57a2bfe760c31edcfdbe
SHA256

20b637867e85437d42decd269da99ed1f26134dec34543329a69abf8e2cc5bd2
SHA512

da7e2637aa2b9ac7001cc288dea7c4b61c4c5985eb8577d31063cdef8fa07e12cc372c10490cd8b68ef4862fd30ec1e6c4694acb61e61ea62d5c80f9683ccb3c
SSDEEP

1536:F03xwmZ1Bl81UyiRUZqBHlOcqnhlytuPC11m:F0Br1BGUyjZqBFzqnhQM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e2cac040e8817b8df04652d06e173b4e_JaffaCakes118

Files

e2cac040e8817b8df04652d06e173b4e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6c20b04bc8cb0de1afeb2028c47367b1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FileTimeToSystemTime
EnterCriticalSection
FillConsoleOutputCharacterA
GetVolumePathNameW
_lopen
EnumSystemLanguageGroupsA
GetVolumeNameForVolumeMountPointA
GetCommandLineA
DebugBreakProcess
RtlZeroMemory

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE