ecf279b2f017864800047196f3a2ff75_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ecf279b2f017864800047196f3a2ff75_JaffaCakes118
Size

22KB
MD5

ecf279b2f017864800047196f3a2ff75
SHA1

a4d8df902851255b31897c2159e12a0f7f538cd2
SHA256

209192cc0fbda59a54ae328048b3ba095d919ffdfe5261d35d4d4103dba87359
SHA512

e6ef87ea686f24954f879f81baa5528f16ab822542fc5736968cc7742ef807f71415a3fc4edb9aaf2c0d55e9a328bca2c230e3de9649a3d0d53ebdae06d402d3
SSDEEP

384:nGGfd3bQho1kbgmECxwRxAB6dXu4+FoNX4gMHzzHCZehIPqZcIf:dbQho1kc+xeNXlMK0YqZX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ecf279b2f017864800047196f3a2ff75_JaffaCakes118

Files

ecf279b2f017864800047196f3a2ff75_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b25efcb34db9301ce393c4e41c1d765c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
ExitProcess
GetCommandLineA
GetFileSize
GetModuleHandleA
GetProcAddress
LoadLibraryA
ReadFile
SetFilePointer
VirtualAlloc

Sections

.text
Size: 1024B - Virtual size: 972B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 302B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ