eaa78dfab0f235571b8eafbb39332927_JaffaCakes118 | Triage

Sharing

General

Target

eaa78dfab0f235571b8eafbb39332927_JaffaCakes118
Size

487KB
MD5

eaa78dfab0f235571b8eafbb39332927
SHA1

09faf4a86e0fdddffb84b86911ad01ce1292174b
SHA256

b301185f13c9f20441ebbbcf360bdd06174cff01b5da49cee874347206a5cdcb
SHA512

1e6217a85b4a3701054cebdf2ed3fc37204fad6a07a57061835cd60e660834ac4d20e49a09cf1981de33758480de1163b452bc1304e3b342c112c58dd46802b6
SSDEEP

12288:wi1hkIMIy6U4+/2F7wJQHC8lBmV4pcWi6y9zrAYIMKXPkxwpaND+Ifr:wi1hU94+YAQHC8HmVoi6KzrldKXPkxwM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eaa78dfab0f235571b8eafbb39332927_JaffaCakes118

Files

eaa78dfab0f235571b8eafbb39332927_JaffaCakes118
.exe windows:6 windows x86 arch:x86

35807dcde258f88fa3ce5c21adc607fb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumTimeFormatsW
GetConsoleOutputCP
GetLastError
GetModuleHandleW
GetProcessHeap
GetStdHandle
HeapAlloc
HeapFree
LocalFree
VirtualProtect
WideCharToMultiByte
WriteConsoleW
WriteFile

user32

LoadStringW

Sections

.text
Size: 512B - Virtual size: 421B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 470B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 652B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ