ea85159b19f5e9329e806a4c29960922_JaffaCakes118 | Triage

Sharing

General

Target

ea85159b19f5e9329e806a4c29960922_JaffaCakes118
Size

1.4MB
MD5

ea85159b19f5e9329e806a4c29960922
SHA1

7d8483c3836f59850e5be4ffbe4c87bf8a1630f4
SHA256

a1941e39b01726140a5400088ad1bad59bca4011164bccbb14aa2618df4d0ca9
SHA512

d90e6f25f91e1862bef07026af2fbcf69569be24239ab86f917a1a6806821450ee2e4f284fceaea1745191a0429e11f45c0dcb5603dfd1ec3fc31228a7863294
SSDEEP

12288:cg3sqhavGlGPxdoKKVlA2yzW2aR2s1AWfDd8N+LzXnaFHmB/ki5NRRRfPY5l17Z:/Snol3CW2aR24fDHLL4CZSf17Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea85159b19f5e9329e806a4c29960922_JaffaCakes118

Files

ea85159b19f5e9329e806a4c29960922_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b2ff532ac43d3fb793b15a9a1dbfeb27

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__p__commode
__p__fmode
__set_app_type
_adjust_fdiv
_controlfp
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_except_handler3
_exit

kernel32

GetDefaultCommConfigA
GlobalAddAtomA
VirtualFreeEx
HeapSize
SetCommConfig
GetModuleHandleA
GetStartupInfoA

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ