eaae48835aedeb460ae88e44b3b17028_JaffaCakes118 | Triage

Sharing

General

Target

eaae48835aedeb460ae88e44b3b17028_JaffaCakes118
Size

119KB
MD5

eaae48835aedeb460ae88e44b3b17028
SHA1

7b44d227f7462662ac4e139fa5c8672ce5911d00
SHA256

3489f4eeeb1c1d71b2dce3b8505368d06e1d4549d67bf9d732b8141787088289
SHA512

67ab30e028c8476225486808e222fb389a1cb24512f6f65421ea4d67988d81916e9e64ed95eaef01d62bb7da0786f09761b75cdbeb230e6f26dbca1677d8acd5
SSDEEP

3072:uvVvz30vrWndgwKbD5MEgx5TpOusbhosvYgfGAuokUB+lRz98:HEdy6EgTULbasggMZUBq58

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eaae48835aedeb460ae88e44b3b17028_JaffaCakes118

Files

eaae48835aedeb460ae88e44b3b17028_JaffaCakes118
.exe windows:4 windows x86 arch:x86

84a59829b2cacc5c0045c8594475a906

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AddAtomA
WaitForDebugEvent
SetConsoleCursorPosition
LoadLibraryA
SetFileValidData
lstrcpyW
SetCriticalSectionSpinCount
EnumerateLocalComputerNamesA
VirtualAllocEx
GetOEMCP
SetHandleCount

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 122KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE