ea022b39e87bd138defa3c4b9189e48f_JaffaCakes118 | Triage

Sharing

General

Target

ea022b39e87bd138defa3c4b9189e48f_JaffaCakes118
Size

56KB
MD5

ea022b39e87bd138defa3c4b9189e48f
SHA1

cbb0d8d6eeba2c485217d290b007b1e0b144029f
SHA256

30c60e00705e34674806028f0b407797bb6a5d1bf8030f2fc08e2dd0ee7909fd
SHA512

25b043d22a27a5c159ba75e441bb2b9468b667d62f0cc4f328789ebcc49567e2d8c8522d87f69092d505bd4c0f2b6a3ecf4bbe5d2544e94867661d1def971782
SSDEEP

1536:Jat1zhzkAdGxn5lqjWFxrtdG1L9RuVxjGNuFpPqGC:k1GgEK1L92xS0S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea022b39e87bd138defa3c4b9189e48f_JaffaCakes118

Files

ea022b39e87bd138defa3c4b9189e48f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

84e90acb0e165935fd3c81d50b5d6170

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadProcessMemory
_lclose
VirtualQueryEx
GetConsoleAliasesW
EnumSystemCodePagesW
FreeEnvironmentStringsW
FindFirstFileExA
LCMapStringW
GetPrivateProfileIntA
EscapeCommFunction
SetFileApisToOEM

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE