ea33f42ac367413c0c9c1b185395c412_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ea33f42ac367413c0c9c1b185395c412_JaffaCakes118
Size

270KB
MD5

ea33f42ac367413c0c9c1b185395c412
SHA1

a7c94d8a54cb467948ba6e74a0a12c36d624ff6e
SHA256

abe8990d56542b5791f248fc86b6d662f4e312b4cb34b7ff5fe404f778071b53
SHA512

85931788cdb952cc6c44d691c2fd389d890ce27b79084d907a0edb530727407da25896db0ec706840e25ac77292bd379f03582161b4c007a2773c331c0c40f27
SSDEEP

6144:4hGqYfzdnK22EWU9Ovvg55w4V4dMrubjyl4k00sDtz5W7xLYHJF:eGVW0we5w4A/jyl4k0JFWFCJF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea33f42ac367413c0c9c1b185395c412_JaffaCakes118

Files

ea33f42ac367413c0c9c1b185395c412_JaffaCakes118
.dll windows:4 windows x86 arch:x86

9a5b7a6d26cab3086fdf0a99839d0078

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CompareStringA
ExitProcess
FlushFileBuffers
GetDateFormatA
GetFileSize
GetSystemTime
GetSystemTimeAsFileTime
TlsAlloc
lstrcmpA
lstrcpyA

Sections

.text
Size: 22KB - Virtual size: 404KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 243KB - Virtual size: 244KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ