ea50ecac05788fa48be8642fa67559a6_JaffaCakes118 | Triage

Sharing

General

Target

ea50ecac05788fa48be8642fa67559a6_JaffaCakes118
Size

52KB
MD5

ea50ecac05788fa48be8642fa67559a6
SHA1

27fb837307cf819f49d81b032433f0efb83defa7
SHA256

1735e0042b2690a63ae8f0a9adaafb27f01c987b9204285f998af74ab857b5c2
SHA512

a7f4fde47a585e9788365d96c47f7d666e6497651023b722ef8fd94c7af1e2951912b5d43377277e45f97e6a138cfd083637736cd000aad35a27157cd7e8bbc6
SSDEEP

768:AOhHYZwo8tATsAgcJEkDavy1ek7MGk9Y1BMYvoxQkdKb3dXNDBB7USf9:l6wouc2fy1J7MGH1SYhvtTBJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea50ecac05788fa48be8642fa67559a6_JaffaCakes118

Files

ea50ecac05788fa48be8642fa67559a6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fec0c28e312ad0c1bcde1a243cf06c02

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetShortPathNameA
GetProcAddress
GetModuleHandleA
GetStartupInfoA

msvcrt

strcpy
strlen
free
calloc
fclose
fwrite
fopen
malloc
strcmp
memcpy
memset
strcat
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_exit

Sections

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ