2eb66f4afffeeaf19b264f8cfac81f76_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2eb66f4afffeeaf19b264f8cfac81f76_JaffaCakes118
Size

276KB
MD5

2eb66f4afffeeaf19b264f8cfac81f76
SHA1

fa402b4499bb8d5dfc0f1e5b94a3d83f29da7520
SHA256

0d677a0e52c16581f26dc004ce536745dba4d5d2a467c2ab7171f5b44c865189
SHA512

ed81af1d852ca4e4fb705221ca5316005c7b535ad2534c4f47722c88c3b246236a4f85b14783239a5ce925071de2a138c8173ede25b5a445fcb104db096bce66
SSDEEP

6144:+7SlrLES1X9S7GWFujyEzmEw2QNifeBVM/bH:KkWFuj/w2IVK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2eb66f4afffeeaf19b264f8cfac81f76_JaffaCakes118

Files

2eb66f4afffeeaf19b264f8cfac81f76_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bc592f93a5af05596ed5686326afbfba

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumSystemLocalesW
GetCommandLineA
TlsGetValue
GlobalReAlloc
lstrcatA
GetAtomNameW
GetDateFormatW
CreateProcessW
VirtualProtect
EndUpdateResourceW
GetModuleHandleW

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.megrsrc
Size: 228KB - Virtual size: 228KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ