ea2a2d1667d65a840109daebd47d3d6b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ea2a2d1667d65a840109daebd47d3d6b_JaffaCakes118
Size

56KB
MD5

ea2a2d1667d65a840109daebd47d3d6b
SHA1

e2bd31ec6a94ec564bff2617a918b79e094ef7dc
SHA256

539c2d99eb113b49402e7be1baa3ea340dd0b17f8dc4a57226aff06097e685ba
SHA512

b6888bd3ca26d02da162660205711a473b4e282562b8b9692fd879624a86fdd7bb7dac58b4b74d10c1fac0dd3424b1c47dcc04a4cb72c6a2bcff70257059a275
SSDEEP

1536:JOj3qiN9mMxmRvgUyW6456rP0Yc8m7PuIJ2PX3GygA8WywR:JOjp9mnJWekPCuIJ2PsaR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea2a2d1667d65a840109daebd47d3d6b_JaffaCakes118

Files

ea2a2d1667d65a840109daebd47d3d6b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

476931706ef4d37604ecabfe0e0d9267

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetUserGeoID
GetLongPathNameW
CancelDeviceWakeupRequest
AttachConsole
AddConsoleAliasW
MapUserPhysicalPages
SetConsoleCursorPosition
OpenEventW
CancelDeviceWakeupRequest
SetFirmwareEnvironmentVariableA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE