8ee4f56945bb2b9c97eee098fab713b4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8ee4f56945bb2b9c97eee098fab713b4_JaffaCakes118
Size

56KB
MD5

8ee4f56945bb2b9c97eee098fab713b4
SHA1

8b7fe03495c7b29cd8ffa15633da5b25f02d4f06
SHA256

863d6bd3370128ae3352120428d800c75d3543627ea65a3dd7f0016ab86bf79e
SHA512

23b9a82c553de553220f4f7d4a7a9f66c9fd8252fc0547ecab69ada86da9ddbc549279719de108af3c536bf773b35f38cd505998e4b043a3d16415bb8cc640a7
SSDEEP

1536:GDULQcN9gqP7pL3rowHvUVQTq5UXwS1+rrDhC:GDVCg8pL3rfHMVlUXjKNC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8ee4f56945bb2b9c97eee098fab713b4_JaffaCakes118

Files

8ee4f56945bb2b9c97eee098fab713b4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a72b74bf6a076ec9cf935ff6b7aa95bb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFullPathNameA
DebugSetProcessKillOnExit
DeleteTimerQueueEx
NlsGetCacheUpdateCount
EnumSystemLocalesA
ReadConsoleW
SetDefaultCommConfigA
SetConsoleNlsMode
SwitchToFiber
EnumDateFormatsW
GetConsoleCursorInfo

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE