8ee70ae28dd8c21e3d91e6d8347cea8f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8ee70ae28dd8c21e3d91e6d8347cea8f_JaffaCakes118
Size

71KB
MD5

8ee70ae28dd8c21e3d91e6d8347cea8f
SHA1

e52e78d3ddd9f223d603b14651998776ea88ef2b
SHA256

ec6fe75560d0e04858a5c90eb7c0caae016006f447c6d46556919069fda0b58c
SHA512

a1580bb9214c75089b1c6846ac4c5300cd11b8e87869ecec2b18781701eeeb80ebcad6470e2fe8ee86f07d31bcab17b12759f3a690691e86c92301626573bce0
SSDEEP

1536:BGGJWyJuHeR4TTsx+ZJ6yvhPJSqr6TWLX10zkAb:BTWuuHe+TVJ6yvnvrdX1ckA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8ee70ae28dd8c21e3d91e6d8347cea8f_JaffaCakes118

Files

8ee70ae28dd8c21e3d91e6d8347cea8f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1cc7be9ce0271c2228c0980c6c7ea1d9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetNumberOfConsoleMouseButtons
GetCurrentThread
GetTapeParameters
DeleteFileW
EnumResourceLanguagesW
GetFileAttributesExW
BaseUpdateAppcompatCache
BaseQueryModuleData
HeapFree
SetConsoleCursorMode

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE