a5e7914f70fe7b38f4bd1717334dd8ff_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a5e7914f70fe7b38f4bd1717334dd8ff_JaffaCakes118
Size

31KB
MD5

a5e7914f70fe7b38f4bd1717334dd8ff
SHA1

f82b85dcbffadfea357cdfd11165e40aba68a76a
SHA256

eebc3ad38f412b850154203647e6b9d0411613d60376e5c5e09e27574030488c
SHA512

c0807abcaf17bfdedb26f645320b0fc29c413b5bc0a4e12248fb3c208a40e69f46ec0f49f32e1c0decd86cf98a8a5030774dc65b1d38b4732130aa7f98ddffcf
SSDEEP

768:zwJ2LnbfOweyzF+ohxevCjNi/jUlo49flawxVUF7:sJ2vmwhF+ohxevCArf4hlawxVq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a5e7914f70fe7b38f4bd1717334dd8ff_JaffaCakes118

Files

a5e7914f70fe7b38f4bd1717334dd8ff_JaffaCakes118
.exe windows:4 windows x86 arch:x86

20858b4ef280c35caea670532d251099

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MapUserPhysicalPages
IsBadStringPtrA
SetFileApisToANSI
SetEndOfFile
GetCPInfoExA
GetTempFileNameA
GetConsoleInputExeNameA
GetFileTime
FindFirstVolumeA
LocalHandle
CloseConsoleHandle
EnumSystemLocalesW
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

.code
Size: 4KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ