eefc603eb2a0a79a6a9210fb9b2a0d8c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eefc603eb2a0a79a6a9210fb9b2a0d8c_JaffaCakes118
Size

62KB
MD5

eefc603eb2a0a79a6a9210fb9b2a0d8c
SHA1

56a99668db4b7387554ffeb02081ebabbacb28c2
SHA256

0cd84ceb0a85ddef6dec7f5f12c6049414c6d193caa4a3b7da54048cfe8b25dc
SHA512

deb913276e37f06e8cf2dde02d7cfb86c8d6e80b080aabb0a7203921099412b54d2695f268c4338940f002ba896a2081780c4d6cb6b77f28102cb8f97337454e
SSDEEP

1536:gu2F3voJP7Ncy/AsDU3M1wCsjNFbkhmnU4x8VScWh/kybOj9cGnv:gRgbRAEWf36mUENL1Gnv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eefc603eb2a0a79a6a9210fb9b2a0d8c_JaffaCakes118

Files

eefc603eb2a0a79a6a9210fb9b2a0d8c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7d8dedb9ef355e1729080eed8112253a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AreFileApisANSI
GetUserDefaultLCID
DuplicateHandle
UnlockFileEx
LCMapStringA
AreFileApisANSI
Module32NextW
Process32FirstW
LocalFree
GetConsoleMode
WaitCommEvent
_llseek
GetCommState
OpenWaitableTimerW
IsBadStringPtrW
lstrcpynW
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

.text
Size: 5KB - Virtual size: 83KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 53KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE