2e3a9ac7a780a0a3dec1a6f5a0597232_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2e3a9ac7a780a0a3dec1a6f5a0597232_JaffaCakes118
Size

44KB
MD5

2e3a9ac7a780a0a3dec1a6f5a0597232
SHA1

ab846055bb2174f725987bc55772d354426976ec
SHA256

50a314ff68174366f4dc3281687943f08c2337e8913bf3efe756fbe078541577
SHA512

61c897ac305c26d4afbe4014ad700c613f2f9555fa2387d46d235a73d867df95daba0a5eaff4fc0baf522b95dd8524b824c7e322f280a9bcb34fd5cb8d6e8adc
SSDEEP

768:8WI01s4cwp8cWXeX2v24CbJ5YNCIusL6UXsx/9HV1qgJ+Z2d24ml6AWR:8u9AcWXW2vR4YNCIusLzXsx/Fqw+Id+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2e3a9ac7a780a0a3dec1a6f5a0597232_JaffaCakes118

Files

2e3a9ac7a780a0a3dec1a6f5a0597232_JaffaCakes118
.exe .ps1 windows:1 windows x86 arch:x86 polyglot

7c00c8c83ce27ea1de1f41137701e936

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

CreatePen

user32

VkKeyScanExA
WinHelpA
wsprintfA
wvsprintfA

kernel32

GetDateFormatA
GetDefaultCommConfigA
GetDiskFreeSpaceExA
GetDriveTypeA
GetEnvironmentVariableA
GetFileAttributesA
GetFullPathNameA
GetLocaleInfoA
GetProcAddress
LoadLibraryA
UnmapViewOfFile
VirtualAlloc
VirtualFree

Sections

.code
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 22B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 598B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ