eb41f3233e697cf5b9577c35421d3051_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eb41f3233e697cf5b9577c35421d3051_JaffaCakes118
Size

31KB
MD5

eb41f3233e697cf5b9577c35421d3051
SHA1

06ad9fdace7c9ba5ae068593bb368008e72af0b7
SHA256

fcb852ed9344cc854857df1a15aa51b05df4ae3810ea20982fd181eb3b73bf3a
SHA512

910b137c455f5b7e5cb80183d7f50af03282e1c9c31f595321380cf9092e1be4e6efc2bbb6ef07373874f8f112b79351f70e801c5fa3c430dc26ea00164ffc6a
SSDEEP

768:Z3SA5U4i92B61ocHZa5nAyvViSUzJvNv4lBKRS/h:ZGT92IocHZt+ASiNQlAR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb41f3233e697cf5b9577c35421d3051_JaffaCakes118

Files

eb41f3233e697cf5b9577c35421d3051_JaffaCakes118
.exe windows:4 windows x86 arch:x86

1f3e070030787de229e0a08558bc84fb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FlushInstructionCache
GetCurrentDirectoryA
GetNamedPipeHandleStateW
CreateFileMappingW
SetComputerNameExA
GetThreadPriority
BuildCommDCBW
GetVolumeNameForVolumeMountPointW
LocalFileTimeToFileTime
FindFirstChangeNotificationA
GetConsoleCommandHistoryW
EnumResourceNamesA
CreateEventA
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

.code
Size: 4KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ