eda10dae57f7d8b74d5f9c04354fbc1c_JaffaCakes118 | Triage

Sharing

General

Target

eda10dae57f7d8b74d5f9c04354fbc1c_JaffaCakes118
Size

480KB
MD5

eda10dae57f7d8b74d5f9c04354fbc1c
SHA1

e6eb06c42f35d100e8bcf08e0dcc4ba7ae1f7bba
SHA256

8513014ad7e7be170a8d856729947bbb5a22d88c7c902f464ae545af2e919861
SHA512

b850bb84998e340ba5ce92fc33520bb1f2dc9ae2e209e7238633c900b4cf9e46a31cff4bbb9fcddb1b2f17bc8cdb5c0535be7298de6bd3928e9abecc1b9f0a8c
SSDEEP

12288:Jl+ujU8GMNj5R2A4AXy5iUcZnBePlkvtyC0s:JPjVGGoA475iUcxBe92tu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eda10dae57f7d8b74d5f9c04354fbc1c_JaffaCakes118

Files

eda10dae57f7d8b74d5f9c04354fbc1c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4aa21c4799893a74a7e7e750c662e6df

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFiberEx
GetCommandLineW
GetCurrentProcessId
FindNextVolumeMountPointW
GetTickCount

user32

GetCaretBlinkTime
MonitorFromRect

Sections

.text
Size: 477KB - Virtual size: 480KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 303B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE