e987184d2cb951d1ec51e81e2c8dc59d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e987184d2cb951d1ec51e81e2c8dc59d_JaffaCakes118
Size

56KB
MD5

e987184d2cb951d1ec51e81e2c8dc59d
SHA1

a0ac4e9b20e65cf9b0616a9eb6b75e7460c66736
SHA256

ba6c6275a3602da037f03d099b2d6056131132756b4311e0104127105996bb4f
SHA512

f8dcdda55395a2b4c2a9ccaa222d969400e96976629d154452b5bc455948d100058950be9454928db509098e20826536de61ca7f6aad7f000f04a47858c25599
SSDEEP

1536:ggOLjv99jScZE2oaYpW1793OHrBYRwfsqmCweW:gnXXjnVd1793OL+2EaW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e987184d2cb951d1ec51e81e2c8dc59d_JaffaCakes118

Files

e987184d2cb951d1ec51e81e2c8dc59d_JaffaCakes118
.exe windows:4 windows

efcd3daae2326bcb3f184bc0b878d937

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SearchPathA
HeapValidate
IsProcessInJob
GetSystemWow64DirectoryA
SetLocalPrimaryComputerNameA
FreeLibrary
GetConsoleInputExeNameW
GetPrivateProfileSectionNamesA
MoveFileExW
LeaveCriticalSection

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE