ea149df1ece5d43686847141eea4cee4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ea149df1ece5d43686847141eea4cee4_JaffaCakes118
Size

7KB
MD5

ea149df1ece5d43686847141eea4cee4
SHA1

a190990224a53f2776604c8f0381c2abdbc613e7
SHA256

d7acb6a67187761ddcb5bbb94af3304080f6469e0163f3ac763797a59e0f62ae
SHA512

a8f7f02444006565ecee062a5be038c3de245cbd1a11a3393c032c8cff188daa79fa6e50805e1004113e952203725fef4d2864758f94877caa41059632317dc2
SSDEEP

96:hwAdtJohKiVhqA2pX2hsHmM3B+CFJ3UKSjaxyNiAxJ996x1MN0c7/K4zCJv/vc:ug6q3KGBb2KS8yn799IM77OJv/v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea149df1ece5d43686847141eea4cee4_JaffaCakes118

Files

ea149df1ece5d43686847141eea4cee4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2e6e7f9587eac295ae70eff7c9920545

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
GetModuleHandleA
lstrcatA
CloseHandle
lstrcpyA
GetCurrentThreadId
GetProcAddress
VirtualQuery
InterlockedExchange
ExitProcess
CreateEventA
LoadLibraryA
CompareStringA
Process32First
CreateToolhelp32Snapshot
RtlUnwind
GetFileAttributesA

user32

EndPaint
ShowWindow

advapi32

RegCloseKey

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 568B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE