ea00401b5fb84eacfd06ace7711742d4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ea00401b5fb84eacfd06ace7711742d4_JaffaCakes118
Size

38KB
MD5

ea00401b5fb84eacfd06ace7711742d4
SHA1

962a717c76a09b01a9ff7099336607f657cafc7a
SHA256

459b9ba56db6c459f99f91d4fc2e28503231954f5638cd38060b259ea68f33d7
SHA512

b80a3244af4cc5d0081454061ff1a39cb5cd88e68b8f399c957953b3bd611908d716632236768164817cf0ac5c8856300b40ca23b0ac25802e00e2838b95d57b
SSDEEP

768:4xQRLRTvGUG6B7OVBO4QtUIlXnJfUq0KfkQ:QQRBPG6Bh4QRlZ8q9fkQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea00401b5fb84eacfd06ace7711742d4_JaffaCakes118

Files

ea00401b5fb84eacfd06ace7711742d4_JaffaCakes118
.exe windows:5 windows x86 arch:x86

54c02761a56d2f778c94dcba03aee710

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_c_exit
__getmainargs
_i64tow
__initenv
isleadbyte
_getpid
_getpid

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ