8e0d9d75057ab2926316d8ed3039ee4f_JaffaCakes118 | Triage

Sharing

General

Target

8e0d9d75057ab2926316d8ed3039ee4f_JaffaCakes118
Size

20KB
MD5

8e0d9d75057ab2926316d8ed3039ee4f
SHA1

a4f3032ce293c2d9ba2d10287cef1f0017eb1557
SHA256

532cf88fad4bd28a593b16673f87b4a0b0fd56f65f64bd8371cd372c46cbfbc2
SHA512

5828b8b6979485950d6eeb0684b6335979c92e92d0a6f53d9991a937bdab5f547bd661233d0bbb5747305825aa13f5019247e737dfd4ec3bf74baa60d4f57014
SSDEEP

384:Fn5dPsojRtLDjN0b/md2/sn9eGLLeVAn5jt+5gpcbvXdOV:F5Bjjnv2EnUuLe2n5Rzp+/dOV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8e0d9d75057ab2926316d8ed3039ee4f_JaffaCakes118

Files

8e0d9d75057ab2926316d8ed3039ee4f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f757a5e797a49f150ef120d086332c12

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

PeekNamedPipe
EnumSystemLocalesA
EscapeCommFunction
LCMapStringA
GetConsoleAliasesLengthA
SetConsoleCursorMode
GetSystemPowerStatus
GlobalGetAtomNameA
IsBadStringPtrA
SetCommTimeouts
SetFileApisToOEM
DebugBreak
SetFileAttributesA
GetBinaryTypeA
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

itext
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

text
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

idata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 736B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ