e94654149c93a4acf46cade4b8cca7e8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e94654149c93a4acf46cade4b8cca7e8_JaffaCakes118
Size

26KB
MD5

e94654149c93a4acf46cade4b8cca7e8
SHA1

4fb69ef3cf6bfd9640a0f4cb88dc44b81a1f69ba
SHA256

81813288a4b419a3cff4e172dc2c138db857295bd667f577fb913352e73fc6b8
SHA512

e452ef2679e638bd3f5926d97c321eaf8722f36b4f0e8ac79a35b75e6fc69cf4e592183bdb26144959c03cb4f2f64623e1f316c6b933942f556d5cdd93be8ed2
SSDEEP

768:M7C8s1Qw6ofsA9JxVmGfdHF7gLaOmv1E8hTnH3:M7Z2QLYXzhFcLaOw1fnX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e94654149c93a4acf46cade4b8cca7e8_JaffaCakes118

Files

e94654149c93a4acf46cade4b8cca7e8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

42ba314b634f027dfce2d168dae49eaf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetNamedPipeHandleStateW
SetEnvironmentVariableA
EnumResourceTypesA

user32

LoadIconA
LoadMenuIndirectA
GetClassNameW
LoadImageA

gdi32

RemoveFontResourceExA
CreateEnhMetaFileW

Sections

.tls
Size: - Virtual size: 123KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 830B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 392B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ