edc8637eecc80675cb243802e00dd1b3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

edc8637eecc80675cb243802e00dd1b3_JaffaCakes118
Size

11KB
MD5

edc8637eecc80675cb243802e00dd1b3
SHA1

3df90fb8aeee275caec799fd57d9533cb854d90c
SHA256

a9d685ee3ea52c75c14002e3ea47b46b615a4a554cc24c804a529afb43482d5c
SHA512

41af55e9fe4b66d33569c65d9d2cb4427a8450e710ea09e7119c84d26d441d0dbfe57c0d105cbb790f099a38f3b560cfad1c90d8c6a781495c7c0b436aa25da2
SSDEEP

192:j+clEEj035al5gJN0YLmKr89NsPeNNnkshzt+mFh2WdqHFRVrWDnJoDrptX4L:jrEEjM5PjabNsPeNNnkstbiXBun+pZ4L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
edc8637eecc80675cb243802e00dd1b3_JaffaCakes118

Files

edc8637eecc80675cb243802e00dd1b3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ee4a85a24a78b96f1f446cb4f1944dde

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetLastError
CloseHandle
WriteFile
CreateFileA
GetTempPathA
GetTickCount
SetLastError
GetProcAddress

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 426B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ