ebfec8b1976f59f377e6a313ca9d8aa6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ebfec8b1976f59f377e6a313ca9d8aa6_JaffaCakes118
Size

18KB
MD5

ebfec8b1976f59f377e6a313ca9d8aa6
SHA1

58bdad33758d8a374f1f5484b36787aab5badb59
SHA256

74efe072634973b0a39c08b6d6f4a1456641e91d2e132344c0909a5d6162fdb8
SHA512

e9fec98a66a7b1edf20c9428cedc5a6cc696f19fa0ca7bb0a14ebf85a1dcb64172179fbd92da3bef49226b3adb900d0751a9160b40a565d9944a2b76e2156774
SSDEEP

384:PxlgrUdcgaVf/ZcNzoZkPP8V7fCz8mm2G/:plg9giZcJZP8V7q8mmp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ebfec8b1976f59f377e6a313ca9d8aa6_JaffaCakes118

Files

ebfec8b1976f59f377e6a313ca9d8aa6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

81638d02019c0bfcaaf23a9c69f2f12c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileMappingA
WaitForSingleObject
CreateProcessA
GetCommandLineA
CloseHandle
UnmapViewOfFile
WriteFile
MapViewOfFile
DeleteFileA
GetTempFileNameA
GetTempPathA
CreateFileA
GetShortPathNameA
GetModuleFileNameA

user32

wsprintfA

Sections

.text
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 533B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ