ea796f606fa300060cb7f6d69147e965_JaffaCakes118 | Triage

Sharing

General

Target

ea796f606fa300060cb7f6d69147e965_JaffaCakes118
Size

167KB
MD5

ea796f606fa300060cb7f6d69147e965
SHA1

eddb7b43a42072e52de1225f8463101cc153b812
SHA256

9d65657a2b8cd95ae8e5bffcc187522cdef999ff5e4c6e3b391078537abf1d90
SHA512

b11e6daf52e7282c5c4b1457cd21bc4c9d4fc39dc125cc6b291987ac038b9c5dec6d9d856d2c9a8cf4da5bce1e6ca3ee61cda1619066c37562f380068bd8c8f3
SSDEEP

3072:GUnqhXW+9YYxTOMa0dOsW6d8It/xE0IeR0Kk8CDKcWs48:XnqhD9B/aJf6d75qc/k8UKVQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea796f606fa300060cb7f6d69147e965_JaffaCakes118

Files

ea796f606fa300060cb7f6d69147e965_JaffaCakes118
.exe windows:4 windows x86 arch:x86

e80496ea15010e034ce195132602efde

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_initterm
_except_handler3
_controlfp
__getmainargs
_acmdln
exit
_XcptFilter
__set_app_type
_exit

kernel32

Process32First
EscapeCommFunction
SetTimeZoneInformation
GetModuleHandleA
GetStartupInfoA

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ