ef28f00e3981be6d67c1e812ee276904_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef28f00e3981be6d67c1e812ee276904_JaffaCakes118
Size

49KB
MD5

ef28f00e3981be6d67c1e812ee276904
SHA1

abe3d095b8d48341ea40b615e1c8251f9930fe0e
SHA256

e6b7b0a6270c5dab586e882bf77d8258a6332d89bc69633b69c066eececefcad
SHA512

926f60c23499a98db2e24114eeb057070ebc5b70ead54e970f3dd13496313eaf1699df289812f691cfd69ecd63598a73be48b8cccca35331c55fd6a126d14de0
SSDEEP

768:N9bEIg8631r7Dy4jOUw702A+wY+AWXR28fmACkbXIN2EcUs1tMT1wny3lPH:NKX8AOvUw70dXY+AWXLfNCkDYx2yVPH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef28f00e3981be6d67c1e812ee276904_JaffaCakes118

Files

ef28f00e3981be6d67c1e812ee276904_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d1ac109b8b9b9f11b429984427b7115f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFiberEx
FindNextChangeNotification
TlsSetValue
InvalidateConsoleDIBits
FileTimeToLocalFileTime
GetCompressedFileSizeA
SetThreadIdealProcessor
MapUserPhysicalPagesScatter
GetStringTypeExA
SetSystemTimeAdjustment
VerifyConsoleIoHandle
HeapFree
ScrollConsoleScreenBufferW
RtlMoveMemory
lstrcmpi
WaitForMultipleObjectsEx
FatalAppExitW
GetDateFormatA
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

.code
Size: 4KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 41KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ