0eb75a4d3c45276d534670d37cb6bb34_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0eb75a4d3c45276d534670d37cb6bb34_JaffaCakes118
Size

14KB
MD5

0eb75a4d3c45276d534670d37cb6bb34
SHA1

47cfd8ba062ec88e2f56bcac0d0fada3ffded651
SHA256

93ba44a2b0d10dfab8bb87c59bf1260569978127ec019e55f224409d0b5d1e3f
SHA512

77f7ec43fc3be6cd327a27268be27f0a0f3d66dad9259889becfa9c9d2690796307eff8fc481ad03e556df688666fe47500495c51ada935c9ccd724f53379154
SSDEEP

192:BW3igceAdggeaamFLNrSJagVyIRYqygM48qfLbCoX1leszX4fz5y332tkILUqPD:BWha2yayNe5gIRYqyi8yC0A+4L5Nk5qb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0eb75a4d3c45276d534670d37cb6bb34_JaffaCakes118

Files

0eb75a4d3c45276d534670d37cb6bb34_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7e32191ed5d7cf49bf1f86011d2a6284

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
FreeResource
ResumeThread
VirtualProtectEx
WriteProcessMemory
VirtualAllocEx
GetThreadContext
CreateProcessA
LockResource
LoadResource
SizeofResource
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
LoadLibraryA
FreeLibrary

msvcrt

_ftol
_CIpow
malloc

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 586B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ