eec52647e08ee86e35245ede01dc1ec6_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eec52647e08ee86e35245ede01dc1ec6_JaffaCakes118
Size

696KB
MD5

eec52647e08ee86e35245ede01dc1ec6
SHA1

4d00ec6abf7811b4663bde070977ec3a03a65a09
SHA256

1113e6b478fbda0ab341f0f3fc45a9181180d84b16a87441c44004fac17f09bd
SHA512

3429f27ceed9297ec1325e151a57b7cd234be04325b53c070b2d9e860d5ce06667feb9416cb3e6dd4c56d79b8b4ceed52bbbef73204aa40e903d10ea6328c2db
SSDEEP

12288:Upv2JeImtATsST5sNZAHcxhTTfqejoWBE167dD83Q7XirheRsUxkEZ0V:U92gIiS5gZA8j/qioWWQV8g7E9E6V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eec52647e08ee86e35245ede01dc1ec6_JaffaCakes118

Files

eec52647e08ee86e35245ede01dc1ec6_JaffaCakes118
.exe windows:4 windows x86 arch:x86

451b4453b78d0087846f5cd37de5790e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetPriorityClass
GetCommandLineA
SetCommMask
VirtualProtect
ExitProcess

user32

DestroyWindow
GetWindow

shell32

StrStrIA
StrStrIW

Sections

.text
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 648KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 680KB - Virtual size: 680KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ