ea7a08c040fc105a4398811a073df525_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ea7a08c040fc105a4398811a073df525_JaffaCakes118
Size

35KB
MD5

ea7a08c040fc105a4398811a073df525
SHA1

6ef28fc54010c72743723a837f9788191cc46b9b
SHA256

39ef08937046de50ea6dc2e2ed7586ae581a0c308840027964e8e19aedfaa9a3
SHA512

f359e06a8a85a9d6327841be22eaad892498c36ef065dd42d8d2f77fe2b48c129188b47df5693a03452476af679018a7f4ef849a0f5524b25574fa117b2e6869
SSDEEP

768:pK9SNTfSEeqQzw6YbGUbSTBQyXKSdHm34CHR9F52B7:Q9SsEeqQzwyUb7d4CHLF5g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea7a08c040fc105a4398811a073df525_JaffaCakes118

Files

ea7a08c040fc105a4398811a073df525_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a73bf5ebfd9ff4169963e51fbe81e6ed

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
ExitProcess
GetStartupInfoA
FindResourceW
EnumSystemLocalesW
WaitForMultipleObjects
GetCommState
SignalObjectAndWait
SetThreadAffinityMask
GetConsoleTitleW
ConvertDefaultLocale
GetCurrentProcess
SetVolumeMountPointW
BeginUpdateResourceA
GetCommProperties
GetConsoleCharType
GetACP
EnumResourceLanguagesA
Process32First
SetUnhandledExceptionFilter
GetThreadPriorityBoost
CopyFileExW
HeapUnlock
GetPrivateProfileStructA
Toolhelp32ReadProcessMemory
lstrcmpW

Sections

code
Size: 4KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

data
Size: 27KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

idata
Size: 1KB - Virtual size: 280B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 728B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ