e9c6e0bae181c5b12201aed5b2e36321_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e9c6e0bae181c5b12201aed5b2e36321_JaffaCakes118
Size

340KB
MD5

e9c6e0bae181c5b12201aed5b2e36321
SHA1

47f46adf823fb80758b3538211d51907d4eedf12
SHA256

59ec0f57ea7ff90651b76ea77e437127491eee039200fd4d0daa0e3f2b3d6ce2
SHA512

8073a990aa01485979e7e5309bdc74f0be67c9998ab68fc95ad9ce442627844212b96d7bbe5babd8121f1509a27962d777ac29a36eb172aad2304c49e334e2e6
SSDEEP

6144:i6pF5Og5Ilaaa/1sxKENEE5mOSa3j7WO4DrAO7k6N663X+d79z4n7gZl:JpF535Ilja/ObNEE7Z3uRrAMn+xB4cn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e9c6e0bae181c5b12201aed5b2e36321_JaffaCakes118

Files

e9c6e0bae181c5b12201aed5b2e36321_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e9e460df6b6008932995edf44f42aa7f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocalTime
GetLastError
GetModuleHandleA
VirtualProtectEx
GetTempPathA
GetProcAddress

advapi32

ConvertSidToStringSidW

avifil32

EditStreamSetNameA

Sections

.text
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 364B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 196KB - Virtual size: 683KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ