eff5daf8cc7acbf0469d81b9fc3472da_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eff5daf8cc7acbf0469d81b9fc3472da_JaffaCakes118
Size

145KB
MD5

eff5daf8cc7acbf0469d81b9fc3472da
SHA1

82329731be8bf54e8b5fcee52d1635a3f0913ec3
SHA256

43c452debafb46dccece9ddd4770ca1ab79f1c7113b72066aceb5fba842aed7a
SHA512

f18326c3c78edf56f7cfc1a937f93b5826b85c92b312a183df2fa2d9c16928d2b983273ab65fa9c5de4f7308929a1f9fe00863d81388fe79fb4ed0d32689c7f1
SSDEEP

3072:52bb64cyRoZ0rjRcxQrf5ycEpchRlWLweHR0/o+YIvz:5+ncKZQQrIcEpyfYwBA+V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eff5daf8cc7acbf0469d81b9fc3472da_JaffaCakes118

Files

eff5daf8cc7acbf0469d81b9fc3472da_JaffaCakes118
.exe windows:1 windows x86 arch:x86

a60b48984a6747eeac166183281ac767

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

FileTimeToDosDateTime
SetLocalPrimaryComputerNameA
GetCurrentConsoleFont
GetDriveTypeA
VirtualAllocEx
CompareFileTime
HeapQueryInformation
IsDBCSLeadByteEx
GetDiskFreeSpaceExA
CancelWaitableTimer
GetModuleHandleA
WriteProcessMemory
OpenMutexA
SetFilePointerEx
WritePrivateProfileSectionA
QueryPerformanceFrequency
GetLocaleInfoA
GetProcessWorkingSetSize
GetThreadLocale
WritePrivateProfileStructA
GetShortPathNameA

oleaut32

SysFreeString

winspool.drv

EnumPortsW

comctl32

ImageList_Read

Sections

.text
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 88KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ