ea7ee02e2f4c46062b37d80748ed5d86_JaffaCakes118 | Triage

Sharing

General

Target

ea7ee02e2f4c46062b37d80748ed5d86_JaffaCakes118
Size

85KB
MD5

ea7ee02e2f4c46062b37d80748ed5d86
SHA1

08c9caf57077a4e96d5cb0dff1a7ca02e3ea0283
SHA256

43b84b19a518850837a68b4fef8154acaa859a60aad052c872177346be0f1ff1
SHA512

49b20077e0a37183b514556ac7e155d3dcdd2c8022cdabf33313249d56eee5904e553e962d15f824bb5af818d80f21e4e84ee60ab0157d03b9dda9efe670e6f4
SSDEEP

1536:OvTu6HYjXgHgXfzao2fgUwr+PG0F0b2eo3MBdweVKY/UfoJ:AYMHgYc+f0b2H3MBd/r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ea7ee02e2f4c46062b37d80748ed5d86_JaffaCakes118

Files

ea7ee02e2f4c46062b37d80748ed5d86_JaffaCakes118
.exe windows:5 windows x86 arch:x86

333f50441befc39f5d2dd9e654ce4107

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

ord29
StrCmpNW

kernel32

lstrlenA
GetModuleHandleW
LoadLibraryW

Exports

Exports

?LongWayCinema@!PEH_KK:X

Sections

.text
Size: 24KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 174B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 748B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ