eac1e9d9e841de1905137f05636a143e_JaffaCakes118 | Triage

Sharing

General

Target

eac1e9d9e841de1905137f05636a143e_JaffaCakes118
Size

363KB
MD5

eac1e9d9e841de1905137f05636a143e
SHA1

2858ed8412f6939b3de3ebda55fcc20e361e4a55
SHA256

2e61c19e8a51ecc7f158bf169b974d5b10e135784b143862a75b0c4a52b0bdb8
SHA512

154de4b5b96f2f6bf21ac6f8a41ae2ce5f7bbf470950e7eba0d71e46278d7dfdd8138aa7a9acf9af4ac2d186f032827c8f9352f36bd6b65303600c73bdec31fc
SSDEEP

6144:9epUytLLbuumxThLC6G6hic8EthxvlQ8MHT0SUcN51H6k:9epTLHNAThLfhic/JvlmAShuk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eac1e9d9e841de1905137f05636a143e_JaffaCakes118

Files

eac1e9d9e841de1905137f05636a143e_JaffaCakes118
.exe windows:4 windows x86 arch:x86

f93864a4ce6e8870853f7205b3492094

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
MultiByteToWideChar
HeapAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
HeapFree
VirtualAlloc
HeapReAlloc
RtlUnwind
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
WriteFile
GetLastError
CloseHandle
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
SetStdHandle
FlushFileBuffers
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetFilePointer

gdi32

GetCharWidthA

Sections

.text
Size: 126KB - Virtual size: 125KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 232KB - Virtual size: 232KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ