ea4babbd8f7c614f51c2bec44c8267a3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ea4babbd8f7c614f51c2bec44c8267a3_JaffaCakes118
Size

140KB
MD5

ea4babbd8f7c614f51c2bec44c8267a3
SHA1

e132f5f9681cc9cd5b11b9750d3df69b9e33b7dc
SHA256

2b145bfa3c126c9b737cdd6316a67b0eb5f4d703b3ef80e7ea5810269d2b760b
SHA512

2c46cacac32ce1954d9a170be4f09884bb6774dda2a58cdec3bd9a7f28f7348e56e2bda11599daf5c940d5938cf75f2e8c4f5668d20b4f5381db8d92e806a99e
SSDEEP

1536:YK+NJAPod8leLLLLLLLLLLLLL4YbTBxupuHG6+/efOtNLLLLLLLLLfKotE8Bq4tR:H+NJA0JxOuHx+/efOrKo3876NCf/Xey

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea4babbd8f7c614f51c2bec44c8267a3_JaffaCakes118

Files

ea4babbd8f7c614f51c2bec44c8267a3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e4510e7fce429b13a61eb2314890283e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WriteFile
CreateFileA
SizeofResource
LockResource
LoadResource
FindResourceA
GetLastError
CreateDirectoryA
CreateProcessA
MoveFileA
DeleteFileA
GetTempFileNameA
GetTempPathA
GetModuleFileNameA
WaitForSingleObject
CreateMutexA
GetModuleHandleA
GetStartupInfoA

msvcrt

_initterm
??2@YAPAXI@Z
__CxxFrameHandler
strstr
_vsnprintf
_beginthread
_exit
_XcptFilter
exit
_acmdln
__getmainargs
??3@YAXPAX@Z
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ