ea3407a088f19df8b3a3167a8f2c17bf_JaffaCakes118 | Triage

Sharing

General

Target

ea3407a088f19df8b3a3167a8f2c17bf_JaffaCakes118
Size

87KB
MD5

ea3407a088f19df8b3a3167a8f2c17bf
SHA1

1f289accc13aa9dbc017642524958132f252538a
SHA256

a6d921caa2b8407b871b6229a6dc6d4d90e5bb1afa35ef49fcec4eb2a6faf485
SHA512

59d525f66b6dd96e55cfa3c75eac0686f52a9921f2d3c1671f20b8a1e8a0b28f28ec96b75687354332269008a0e404cdd1e6ac31c016598e5bbe93ed8606a008
SSDEEP

1536:/KWbJIJRbqpq5u/2ekkZWFj2T2D5pGbR3zkmUB7ytR5E9ES1bZTE++9aJ6fdy8:SWAo3kOCCCpyl4un5E7VZH+9a8fdP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea3407a088f19df8b3a3167a8f2c17bf_JaffaCakes118

Files

ea3407a088f19df8b3a3167a8f2c17bf_JaffaCakes118
.exe windows:4 windows x86 arch:x86

2ac5a2d731465d6707868266eae4e753

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
VirtualProtect
GetModuleHandleA
ExitProcess
SetConsoleScreenBufferSize
Heap32ListFirst
GetLastError

advapi32

AdjustTokenPrivileges

Sections

CODE
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.ecode
Size: 4KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 65KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.isect
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata69
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ