ec5841a864c40a4d83a72c88c50149ac_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ec5841a864c40a4d83a72c88c50149ac_JaffaCakes118
Size

676KB
MD5

ec5841a864c40a4d83a72c88c50149ac
SHA1

ddb47a1f39b4ab02f5c6f5e46b080be33c48b14d
SHA256

ba8f1cdc70bc4e73798f429a9e2826c0062e63ff4075aa1c01c29038375e1f7e
SHA512

dbd9004ff5b529cf945586a042f2ea2116f2bdcedbcb3f9d70d0e5996e00f31eedee9a61556e55b682ef06ec61627bec36693b7fa609a5acdda18dc5843adcff
SSDEEP

12288:aBy67RsJbXi7eKXdkXdZERpSDFhBGa5OA4KgU0BQ:aYgRMiRGXLCQDQeONKgUWQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ec5841a864c40a4d83a72c88c50149ac_JaffaCakes118

Files

ec5841a864c40a4d83a72c88c50149ac_JaffaCakes118
.exe windows:4 windows x86 arch:x86

76c5bd91cd7cbb6503568211bf2da869

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

pdb.pdb

Imports

kernel32

GetProcessHeap
HeapFree
EnumCalendarInfoExA
GetCommProperties
HeapAlloc

Sections

.text
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 648KB - Virtual size: 646KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ