ce7c71cc261ddd965fa4c72758e10fa6_JaffaCakes118 | Triage

Sharing

General

Target

ce7c71cc261ddd965fa4c72758e10fa6_JaffaCakes118
Size

36KB
MD5

ce7c71cc261ddd965fa4c72758e10fa6
SHA1

a8fc0f5e73e02bbe78848f9eab4b7ff58faa20d5
SHA256

6f18993bac4837ea42ebc8a43c38a4b6442ae3ecdd0f7815d88e1ae61537d5b6
SHA512

86d88d5dd8fc7eeb941e82b42b31cf0f994c25c549cc0830e84a65e312b8133a27cd8d33586cd91c301bd5d2c0a30694f3e27a15675ce2d9e19e08e864cdbaee
SSDEEP

768:YQbo7cAirHFozG4yYa4pJ6OYvOOmiZeGmFFz/FJfaquJRn:XbESFoapgnipmFFz/vf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ce7c71cc261ddd965fa4c72758e10fa6_JaffaCakes118

Files

ce7c71cc261ddd965fa4c72758e10fa6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a7eb46f0b8e259bd470c1d75419cbd91

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumResourceLanguagesA
FlushFileBuffers
GetDateFormatA
GetPrivateProfileStringA
GetVersionExA
MapViewOfFile
RaiseException
SetCurrentDirectoryA
Sleep
VirtualAlloc
WriteFile

msvcrt

__p__fmode
free
realloc
setlocale
strspn
wcscmp
wcscpy
wcslen

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ