11ee4ba4a02b345984f1c00dd13d8340_JaffaCakes118 | Triage

Sharing

General

Target

11ee4ba4a02b345984f1c00dd13d8340_JaffaCakes118
Size

204KB
MD5

11ee4ba4a02b345984f1c00dd13d8340
SHA1

d7f9035896ec392917decbb93537bb6753ea3609
SHA256

796c420d468c0116d51c2cc36ffb7a350b836e6a7c0efae23c42b89614d4eb54
SHA512

b80ead742a8592a5fcb5cd7577aaab94a81110d4251b3dd63ad020c64128a248791743bf37275eb34a3d6b99091fdd41bfc2f205fd9e680fe4caffdaa0017548
SSDEEP

3072:SMdvevr3vGPrqCB4iJqzIfZi4VCtbhcF0UPZk+Q1Vf1Kv2Gz7qL5u:lvevrOPrqClFvWA8fO2Gvq9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
11ee4ba4a02b345984f1c00dd13d8340_JaffaCakes118

Files

11ee4ba4a02b345984f1c00dd13d8340_JaffaCakes118
.exe windows:4 windows x86 arch:x86

a15e1eb43bf06463769b2f44ac47e3eb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsoleTitleA
GetDefaultCommConfigA
SetSystemTime
GetProfileStringA
GetCommandLineA
GetCommandLineA
GetComputerNameExA
ExitProcess
ReleaseSemaphore
GetSystemDirectoryA
ClearCommError
QueryDosDeviceA
LoadLibraryExA
GlobalMemoryStatus
DeviceIoControl
FindFirstChangeNotificationA
EnumUILanguagesA
GetConsoleCP
UpdateResourceA
DeviceIoControl
VirtualAlloc
InterlockedExchange
OpenWaitableTimerA
ReplaceFile
SetConsoleLocalEUDC
GetConsoleMode
GetWindowsDirectoryA
EnumResourceTypesA
GetLogicalDriveStringsA
GetConsoleOutputCP

ws2_32

send

Sections

.itext
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 160KB - Virtual size: 829KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ