ea64b0cfebf8e410f56f23eb629a64eb_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ea64b0cfebf8e410f56f23eb629a64eb_JaffaCakes118
Size

13KB
MD5

ea64b0cfebf8e410f56f23eb629a64eb
SHA1

5a22813373bfb7f395134c288b9097abbed6b963
SHA256

9d72a14c9a33f1ee771e3e0e058c69796d26cbb0fc2f78c8fd03d3fd1151cfcb
SHA512

5b374b5ef4535875d3ba3065840285d44e9edb3387eee5d368e2bea50619c86ad200044dca7dd88ab6459ea5eb00df1de895591077d3949e4d7ae8e812fddc8a
SSDEEP

384:CESPbtNsPeNNnkvZ6inNB/O3gvcdtSM9ezcz9hP:d+HsPkoZTNB20KtSD6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea64b0cfebf8e410f56f23eb629a64eb_JaffaCakes118

Files

ea64b0cfebf8e410f56f23eb629a64eb_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ee4a85a24a78b96f1f446cb4f1944dde

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetLastError
CloseHandle
WriteFile
CreateFileA
GetTempPathA
GetTickCount
SetLastError
GetProcAddress

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 426B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ