eaf1f47aca30eadc4f220d636c021ab3_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eaf1f47aca30eadc4f220d636c021ab3_JaffaCakes118
Size

53KB
MD5

eaf1f47aca30eadc4f220d636c021ab3
SHA1

f689d9c36951a502380dd399a1733192aa9972e4
SHA256

30aacf3fcb96c3ac65f8c6ba2ac78e3db58953c83cc0e9f8d703a15f3a9e0d72
SHA512

07e63967467d03f5f5e07b4b92b2be0cd183ce9ac505f57d10fd3d904dc5cd915d960648fc9dd3730cc57f843373f73c757e5260da996879f3821082bdf22761
SSDEEP

1536:aKvDMWdfVIJMEtOwDK9h/QQwHVKykq1WW:BLMWdfVI2iO21KykU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eaf1f47aca30eadc4f220d636c021ab3_JaffaCakes118

Files

eaf1f47aca30eadc4f220d636c021ab3_JaffaCakes118
.exe windows:5 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.rdata
Size: 47KB - Virtual size: 816KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE