2eef8612ab3a074ec58ba4146b94abb1_JaffaCakes118 | Triage

Sharing

General

Target

2eef8612ab3a074ec58ba4146b94abb1_JaffaCakes118
Size

49KB
MD5

2eef8612ab3a074ec58ba4146b94abb1
SHA1

b73e1e06e49d751018df9dc18b67f604071f26dd
SHA256

e93add0259349624cf56d0c49a3d18cd1e6ad414458e3b0e7b72ddd4ee1759da
SHA512

b35ecade77cf0c57687ca506c2a534761ae3d3417e8c0422d70dbe3638f6258ae3e7c04f741ac4f545bceb6087a59a9759ba294088b1af3057810fd82e7f349f
SSDEEP

768:sZn7623LfpZMN2XKz7Ii8gnJJNtnSZunWNcDFb4E6dQwxQ0laVSzl7OORBRk8MGG:W7BoN2XK3IeJJj/EcRbHZoJZOOOGxaB9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2eef8612ab3a074ec58ba4146b94abb1_JaffaCakes118

Files

2eef8612ab3a074ec58ba4146b94abb1_JaffaCakes118
.exe windows:1 windows x86 arch:x86

1dc616668daf449b137700bd6855cd90

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ShellExecuteA

kernel32

GetCommandLineA
GetFileSize
GetModuleFileNameA
GetModuleHandleA
CloseHandle
GetTempPathA
GetTickCount
GlobalAlloc
GlobalFree
CreateFileA
ReadFile
RtlUnwind
RtlZeroMemory
WriteFile

user32

PeekMessageA

crtdll

__GetMainArgs
exit
memcmp
memcpy
raise
rand
signal
srand
strchr
strlen
strncpy

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 56B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1000B - Virtual size: 1000B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE