ec02fa030105d0e7dad22c6f9efacad6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ec02fa030105d0e7dad22c6f9efacad6_JaffaCakes118
Size

83KB
MD5

ec02fa030105d0e7dad22c6f9efacad6
SHA1

f6a9ed54f9941c1f80108ea7b2a1c3b1bec972cd
SHA256

e041d037c227e45ae56bc2cbe586b92c963b79511e02ec102adc77e09308ab1e
SHA512

e17ef31120f1b3bd4c0cdddc79bf913c49b83b16adb4b7faf140193ac97ed1f8dd6601be64ff2fb2ae5715e1d4d50d8bf1c1516eb5a8a2c4b2dc1f7579aea7db
SSDEEP

1536:xuNuBQ6u4/X6yYGAasn1w5KbaBqQtylLIH0oKVpjVrs2ryrd1vUQuqwcizSkX:sWQ6zP6yH+tWBE3BHs2quciu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ec02fa030105d0e7dad22c6f9efacad6_JaffaCakes118

Files

ec02fa030105d0e7dad22c6f9efacad6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4c3296d2421e9296cc75d2e70d01e50c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumUILanguagesW
GetProcessAffinityMask
OpenJobObjectW
VDMConsoleOperation
LoadLibraryW
SetHandleContext
VirtualFree
lstrcpyn
GetDllDirectoryA
GetVDMCurrentDirectories
MoveFileWithProgressW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE