ea61277e3a61e6df45dc81ad116305d7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ea61277e3a61e6df45dc81ad116305d7_JaffaCakes118
Size

99KB
MD5

ea61277e3a61e6df45dc81ad116305d7
SHA1

60d9a5bc182d8ed27e97f6337668e1ad3024a2d8
SHA256

4747d4ee83a4491588333597831f1a816835c18486c6c19cac4b2d0bf5d99d2a
SHA512

d0b59f397b8fb08ac3fc496581b8d5b205e3e3f7e5ab5a099ccdd5c659b19e7028333badbef44c842d3cd9c9e43ca2e8ad9da4019c71f6b29c72c0851366c5ea
SSDEEP

1536:MSEjmTgjqxo4i4WbjNZt3qAyaW9TfM42glBDFGfqyr8819vbWMiQAs1:MjmTNxNSbZ3qSW9CglBDFGMWnN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea61277e3a61e6df45dc81ad116305d7_JaffaCakes118

Files

ea61277e3a61e6df45dc81ad116305d7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

42e7c14ca48123966bb2bc209b151b7d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__p__osver
__p__winver
__toascii
__argc
__doserrno
__threadid

user32

MessageBoxA
MessageBeep

kernel32

CreateWaitableTimerW
CopyFileW
DeleteAtom
EnumCalendarInfoExW
DeleteFiber
FatalExit
CreateFiber
GetLastError

Sections

.text
Size: 24KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 422KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE