ecdb6ba3a3f0aa1cf9625282e146b7b7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ecdb6ba3a3f0aa1cf9625282e146b7b7_JaffaCakes118
Size

147KB
MD5

ecdb6ba3a3f0aa1cf9625282e146b7b7
SHA1

0de2d0777ad27fc22eb9b7565b13bd0171aecfd5
SHA256

550417a9639d57d552b99108dbac018b3f9f8ab30c14ee86988334ab029d993a
SHA512

c937352d1e01d05d3a76f518f86fc5480da311ed4fadb12fa817f30f9f4f4473bb8131070ad538067df610f2fd60eec84d7b07b841b9e432739d5719582ba54d
SSDEEP

3072:tyXegNcbgpMHfoCk75Z2pOKRMV9vE5+fck17Eni:KXpIoC+X2IX9cGD7d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ecdb6ba3a3f0aa1cf9625282e146b7b7_JaffaCakes118

Files

ecdb6ba3a3f0aa1cf9625282e146b7b7_JaffaCakes118
.exe windows:5 windows x86 arch:x86

22037eb99b9816f84eb9f427b64e7b46

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

StrToIntA
PathStripPathA

kernel32

lstrcpyA
lstrlenW

Exports

Exports

?ConsoleInfoReg@567GPAUHINSTANCE__@@U_COMMPROP@@?F
?ConsoleSetRect@567GPAUHINSTANCE__@@U_COMMPROP@@?F
?SequentialAccessTo@567GPAUHINSTANCE__@@U_COMMPROP@@?F

Sections

.itext
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 133KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 117KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.itext
Size: 512B - Virtual size: 270B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 736B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ