eac18aa46b22015bf241eac9b65c8461_JaffaCakes118 | Triage

Sharing

General

Target

eac18aa46b22015bf241eac9b65c8461_JaffaCakes118
Size

34KB
MD5

eac18aa46b22015bf241eac9b65c8461
SHA1

a8c6ca8e18b73ef5a9644baf5d7eafdee54ff78e
SHA256

c8389b8054ed3aad59113452f63cb53bf03fed830398659ff1584324e76c2861
SHA512

4f1cbcffee779b1b5a3f789c204cce4434fab76e809352adc93e8a31da361ff320854db2fe2898ecc4b3c89e73e2490a02436371fdc375341350968f162b9d2e
SSDEEP

384:Hpi+tvX9GC/mAOgTz/9TtqnidNi4sy+w7p5PHl5HbpogtbWgmVIgU7x:JNX9hmW9oM7p5PFHokW/VIgU7x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eac18aa46b22015bf241eac9b65c8461_JaffaCakes118

Files

eac18aa46b22015bf241eac9b65c8461_JaffaCakes118
.exe windows:4 windows x86 arch:x86

ed67fde2522cf3fa39827dbce2528ae1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
CloseHandle
ReadFile
CreateFileA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
HeapAlloc
GetProcAddress
GetModuleHandleA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
GetCPInfo
GetACP
GetOEMCP
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
VirtualAlloc
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
LoadLibraryA

Sections

.text
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE