edce03d512f152c3ad2ae77cfa61ac7b_JaffaCakes118 | Triage

Sharing

General

Target

edce03d512f152c3ad2ae77cfa61ac7b_JaffaCakes118
Size

348KB
MD5

edce03d512f152c3ad2ae77cfa61ac7b
SHA1

81d5db201a8b546441fcdc1460a9948077ac337f
SHA256

8f2757260c173e85e17ab04ae77b759c6e4993d2cb24751ef4475b498a88184f
SHA512

a392b0a131b120b87e706df24ea5ed22a795fac4a7f2606ead7d549b0f35f0b8244ba6445d4e7b7c89165fdf90336b402b0cc66aba68a56d5ea8d3fce59af453
SSDEEP

6144:Qd1EqIaJsMui4VDKAo/HfFfirqkaCWmmG0EW2F2NzZxcogkYxiX3C7P:g+vZ4lqr/3WTG0hJDxcog7UC7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
edce03d512f152c3ad2ae77cfa61ac7b_JaffaCakes118

Files

edce03d512f152c3ad2ae77cfa61ac7b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

3a4966457916b4c35905346dd33847ce

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
ExitProcess
GetSystemDirectoryA
GetModuleHandleA
CloseHandle
UnmapViewOfFile
lstrlenA
VirtualFree
GetProcAddress

user32

wsprintfA

ole32

CoUninitialize

crypt32

PFXVerifyPassword

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 184KB - Virtual size: 755KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 136KB - Virtual size: 133KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ