f7bc7f405896b377ed0ae01073e80c5b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f7bc7f405896b377ed0ae01073e80c5b_JaffaCakes118
Size

53KB
MD5

f7bc7f405896b377ed0ae01073e80c5b
SHA1

a82787fe7dd1fb318aee4e09f4630fa060d02925
SHA256

09fa14f7d407922a7d51870e1ccf6940db08aa364a12c15e350072399f9ea8ba
SHA512

7319935d24f89988e4d5838c15b8bf910d25a1fc4dff5d907e24cde90ee1d01329294f8106112a2ba366ef03cfca6eca3b8819721dc90e0440be4c9cf4d10d9d
SSDEEP

768:5JPmMEGdJwnMZW9P4B/BO9dP7eO8d8A6iYV05gfKoEqjwEGTE7r:5sLMZWeD2J7eXd8AgV0uDXDGTkr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f7bc7f405896b377ed0ae01073e80c5b_JaffaCakes118

Files

f7bc7f405896b377ed0ae01073e80c5b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9184367f8d1f9986888f0eed2e6f8bf4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtect
GetModuleFileNameA
GetModuleFileNameW
GetProcAddress
LoadLibraryA
GetModuleHandleA
ReadFile
WriteFile
CloseHandle
CreateThread
CreatePipe
ExitProcess
HeapAlloc
GetProcessHeap
HeapReAlloc
HeapFree

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 225KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE