cea860fa00b91da5ed43d63825e56d14_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cea860fa00b91da5ed43d63825e56d14_JaffaCakes118
Size

29KB
MD5

cea860fa00b91da5ed43d63825e56d14
SHA1

d9906e08abae40d2d1a83f6a6333552e5acb66e9
SHA256

c118930ba0e795ce25940d0f2237fea2bd0a67a0590974a7e29920b9e84d5940
SHA512

a52fef72ca8eb933217ed5380bf73aa3b7804a4c13aeabae6129c01dd8f4b0a468e9968b38b939fc555753fefaef31207266fbbb4e9b371e54332e62fcfd621e
SSDEEP

768:V7lA7iRPH6oKMtUtOOaDR72ML3eq3u+8dyRiK8NS:g7iNaoJtyOOIzL3eq3whK84

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cea860fa00b91da5ed43d63825e56d14_JaffaCakes118

Files

cea860fa00b91da5ed43d63825e56d14_JaffaCakes118
.exe windows:1 windows x86 arch:x86

1778503ced38d579f4990c6cf3fc93c0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocaleInfoW
GetNamedPipeInfo
GetProcessHeaps
GetProfileIntW
GetCurrentDirectoryW
GetDiskFreeSpaceW
GetStdHandle

msvcrt

_wcsupr
_wmakepath
_wrename
_wsopen
_wstat
_wtol
_wutime64

Sections

.text
Size: 11KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE