ee9309ae6507ecd70ea1d1d8f5c41d6a_JaffaCakes118 | Triage

Sharing

General

Target

ee9309ae6507ecd70ea1d1d8f5c41d6a_JaffaCakes118
Size

76KB
MD5

ee9309ae6507ecd70ea1d1d8f5c41d6a
SHA1

d7e810425f1034aa0c9e41aa42ad5d3611d76b61
SHA256

ce018bb15af0219e64b0890f9d01c25c893b8609695c7d498efbaf4e640c4e4d
SHA512

65adb1f3f046c6678f8f91ffb939faacebd8063dcee5cfc599d3b5507e382a3cec78f7bd97f07db8e9ca72806b7ee5727a77d1e684ddf9af0fb44d0ffe127ad4
SSDEEP

1536:/5NrbsbliTE1ybtXa/LONU8tF9G0noo3fXVI+IG1bUjHO83DmgYx8wUTcQ:/bMco1ytFZ7hnooPVj1biu8u8wUTc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ee9309ae6507ecd70ea1d1d8f5c41d6a_JaffaCakes118

Files

ee9309ae6507ecd70ea1d1d8f5c41d6a_JaffaCakes118
.exe windows:5 windows x86 arch:x86

25bbf42c3cb7fafc7ebaa3f8a393c96a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__set_app_type
malloc
exit
sin
fwrite
_acmdln
free
_XcptFilter
fseek
_initterm
strcmp
__getmainargs
_exit
_adjust_fdiv
_except_handler3
fopen
fread
fclose
strlen
_onexit
__setusermatherr
printf

kernel32

GetModuleHandleW

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 37KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ