eb08a223f390e6ec6bfb99b9c2f88959_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eb08a223f390e6ec6bfb99b9c2f88959_JaffaCakes118
Size

147KB
MD5

eb08a223f390e6ec6bfb99b9c2f88959
SHA1

57884a22f9309ab645ac85d48a61d3f23eec40b9
SHA256

c6ea76c02a65fbea97d8afc52b64f547d9a0ecb2a09fd4352c9e2cba775cc3ab
SHA512

38cb9ad2fb67dd07eb4f84e905e79228eed6856bd8924588a0e7280fdda60c6c5978fa7ddaec6c17be78a525283ffdc9fd31dc6cf7f0ad1dc97c1ce92ac2d529
SSDEEP

3072:d4athqqnFSJ31zyWoGi+SewZarUD8I+/rkRdrtZv1EXiEtMwne:d4atnF21yWoGi2weUDFwrErv1cMZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb08a223f390e6ec6bfb99b9c2f88959_JaffaCakes118

Files

eb08a223f390e6ec6bfb99b9c2f88959_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0b04486052cbafd72311293a6de97609

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LCMapStringW
LCMapStringW
CallNamedPipeW
BaseCleanupAppcompatCacheSupport
GetStartupInfoA
FileTimeToLocalFileTime
GetLocaleInfoW
LZSeek
CreateDirectoryExW
GetOEMCP
GetProcessPriorityBoost

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 133KB - Virtual size: 154KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE