ea4b4ec80f45958158d072e1831f8ac7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ea4b4ec80f45958158d072e1831f8ac7_JaffaCakes118
Size

2.1MB
MD5

ea4b4ec80f45958158d072e1831f8ac7
SHA1

6779946a2959078f21509f7b11e19b33435de555
SHA256

fbf130705ed4de523fd2e38a6c64848af5d6e1ce6a268251e7b6d6e3f8089957
SHA512

543441eedfbee6d83d449cac166a44a33946d47c98a7deb4fa25ba3b5e0a6f278ab2ee401e6871a3dd270a04c1e74e74f06c3a792f1d8fe44138c28384b2fa6e
SSDEEP

49152:642jPfGa80VhQ+QaCjkn0CKygHvP4Qyf9e9iI0Oc:tkXlLVh5wkpKy4v+FQibOc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea4b4ec80f45958158d072e1831f8ac7_JaffaCakes118

Files

ea4b4ec80f45958158d072e1831f8ac7_JaffaCakes118
.exe windows:4 windows x64 arch:x64

02549ff92b49cce693542fc9afb10102

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvcrt

malloc
memset
_get_pgmptr
getenv
sprintf
__argc
__argv
_environ
_XcptFilter
__set_app_type
_controlfp
__getmainargs
exit

kernel32

Sleep
CreateProcessA
SetUnhandledExceptionFilter

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ