ea63c2b7d5a4c85b66d91a2e70d57d2c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ea63c2b7d5a4c85b66d91a2e70d57d2c_JaffaCakes118
Size

242KB
MD5

ea63c2b7d5a4c85b66d91a2e70d57d2c
SHA1

54909da644ecd97bdc4b61fe8f4d954f23ae9123
SHA256

8dd8d48d25b30b8eb8535a11417fcb79c8385b550f9638b681dbd118b078e2cd
SHA512

c8ed1aadf8efceb9dad2a14ff0eda9aafad5487b6f206fbed5fa144a3df067b64fd54c49c0a3c893367ba68c2efa011d950ab38047cf53136098a282e816b6f8
SSDEEP

6144:weBsGQCN/5fTDlpJZyKdnuyAkEyPJBX4fPFtgmOklZGHZ:wYsenDvJZyInuyeUBGNisG5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea63c2b7d5a4c85b66d91a2e70d57d2c_JaffaCakes118

Files

ea63c2b7d5a4c85b66d91a2e70d57d2c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f9ed790a98a914583716db9a596c02c0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
memcpy
fopen
fseek
fclose
floor
ceil
strlen

kernel32

GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
Sleep
FreeLibrary
HeapAlloc
HeapFree
LoadLibraryA
GetProcAddress
HeapReAlloc

user32.dll..

CallWindowProcA

wsock32

closesocket
WSACleanup
WSAStartup

Sections

.code
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ