e4b3a32bd8e0d3bfe3e9ce61cac71371_JaffaCakes118 | Triage

Sharing

General

Target

e4b3a32bd8e0d3bfe3e9ce61cac71371_JaffaCakes118
Size

799KB
MD5

e4b3a32bd8e0d3bfe3e9ce61cac71371
SHA1

48ca59d9b3611f99ff7b27ecbb8b357947886502
SHA256

eda2fc4d3eab34d348d29a72354a51726080f18ce1c1a7a425596ff182a53ecb
SHA512

0a0c5c8e94c2f8ddc770bc6fffb8901f32aae013e2eaf1cd07e56c091ae94812d60daad3f0ea40ce44712bd194cedf146ece0d01b22f948bbbae238002b61afd
SSDEEP

24576:ZtZKp01h2QuJl5RzAI4j5ftAXVJJxF0HivpZT0u+3:M+1hMXsI4Nf2XlxF0CBZHw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e4b3a32bd8e0d3bfe3e9ce61cac71371_JaffaCakes118

Files

e4b3a32bd8e0d3bfe3e9ce61cac71371_JaffaCakes118
.exe windows:6 windows x86 arch:x86

35807dcde258f88fa3ce5c21adc607fb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumTimeFormatsW
GetConsoleOutputCP
GetLastError
GetModuleHandleW
GetProcessHeap
GetStdHandle
HeapAlloc
HeapFree
LocalFree
VirtualProtect
WideCharToMultiByte
WriteConsoleW
WriteFile

user32

LoadStringW

Sections

.text
Size: 512B - Virtual size: 421B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 470B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ