eef4b9992184b4a469d3d18fd2bf1862_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eef4b9992184b4a469d3d18fd2bf1862_JaffaCakes118
Size

358KB
MD5

eef4b9992184b4a469d3d18fd2bf1862
SHA1

e05bd6549ea84eb3dbf691883d40d9078ee61634
SHA256

c1baed85cf1e3fe757e90b2dd83c8609a615803dd631afeb4715d87e8a80b884
SHA512

f3741e79b38287d885e85e887d484b489434c7e601606e161a6e8f2b223df1f952afddb6600f98a98e999c6b746ac94f1d8d49f3ec311a7d258ab35812826faa
SSDEEP

6144:xDnzwMPKotBRuFq/4j0OQ6iQHWSRpjvpyoWlRlDqDjl4AFyO7QC79VulTweZZW:aEPBR5/4k6ifSRPFWlRl2t4AyiQYA8e2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eef4b9992184b4a469d3d18fd2bf1862_JaffaCakes118

Files

eef4b9992184b4a469d3d18fd2bf1862_JaffaCakes118
.exe windows:4 windows x86 arch:x86

91f82168f1c0d622c00cb0cde3b2465a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

ExitProcess
GetCommandLineA
GetModuleHandleA
GetStartupInfoA
SetUnhandledExceptionFilter

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
atexit
cos
malloc
signal
strcmp

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 312KB - Virtual size: 312KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 400B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 664B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE