0eea46acb98c4005309ce0d9a1ac6ffd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0eea46acb98c4005309ce0d9a1ac6ffd_JaffaCakes118
Size

80KB
MD5

0eea46acb98c4005309ce0d9a1ac6ffd
SHA1

8e9ce3c445cdaa559b7c5eae6dc0516b25a5663f
SHA256

d5298c3b574e0c5a82e3fc9ffd9dee70b4bb98aa023235d2911c67d4bbcb0f3d
SHA512

5df651f0e2610ed58a1859d8bfddcbe4c3d38cc693367f753b622370f287f478ac3ffff24e1791f7ff89d2732950207eb1567be6d2d8c4aa555f814252219d47
SSDEEP

1536:fk2Wh6csZk/O9k2t8DHlq4cMZNiWerWAfka0+yzZhYep9F582hW8fPL:fk2WL/3Jq4nZc5rW+V8fYg9F58vYL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0eea46acb98c4005309ce0d9a1ac6ffd_JaffaCakes118

Files

0eea46acb98c4005309ce0d9a1ac6ffd_JaffaCakes118
.exe windows:4 windows x86 arch:x86

836f11c42c90ef8bdc7a5d637d9e47f3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapSummary
FreeEnvironmentStringsW
TerminateProcess
CreateSemaphoreW
CopyFileExW
CreateFileMappingA
GetConsoleNlsMode
UnlockFileEx
SetFirmwareEnvironmentVariableA
SwitchToFiber
GetLocaleInfoA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rrdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE