e347f2b2c5e6bf4108cc10375e14f1c7_JaffaCakes118 | Triage

Sharing

General

Target

e347f2b2c5e6bf4108cc10375e14f1c7_JaffaCakes118
Size

2.0MB
MD5

e347f2b2c5e6bf4108cc10375e14f1c7
SHA1

0d369f40f86c7cbde894e5a75de5e728d113a4bf
SHA256

e2ec3010ae5ebdfbce98411cd7bc7d4cf4da036d8434e1c711df7e5874038e94
SHA512

97b4fef45618c05b12d187627b4b56b3c363aa24ee2e5cfa5982ef754323247c8c4ad2486f656005f5070232119dea6fd11b2eb4a200365bba93c668ed8c2dca
SSDEEP

49152:w1PzWo0ZHhwAeziWfzpdn1l9VKMwemY6kPPfVxyP:wFz2qsizpdGzemY6kXfY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e347f2b2c5e6bf4108cc10375e14f1c7_JaffaCakes118

Files

e347f2b2c5e6bf4108cc10375e14f1c7_JaffaCakes118
.exe windows:4 windows x64 arch:x64

baa93d47220682c04d92f7797d9224ce

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

lstrcpy

comctl32

InitCommonControls

Sections

Size: 7KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 3.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

nmfgrjnt
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

jdjlnwct
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ