0ef36728ebb9ce095e9bdc1ed7c76ae9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0ef36728ebb9ce095e9bdc1ed7c76ae9_JaffaCakes118
Size

54KB
MD5

0ef36728ebb9ce095e9bdc1ed7c76ae9
SHA1

6bef8a2f2892c30c6f4d7e8abeae4661ffbe85b4
SHA256

5b3931bc058c5fc07a25b68bad5a87498f30fdd07eb4f2c03066b4310d8f3dcb
SHA512

45e669b43816cc81c67230293bc7b0ff9d9d45507c193a03be0986b498ef46a353d9b45d3b5c847b966e54584e25bf4d9a795d89dcbe9aeb722fae1018102665
SSDEEP

768:VVKm4GV4ujtuYgFC5IjezJckOyLb172+oEFZ0TORX3iSHWIwjkdLv/kcH5hUDrp3:VQKV1MyVckOG12TGX1HxwjkVnDhI+Hc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0ef36728ebb9ce095e9bdc1ed7c76ae9_JaffaCakes118

Files

0ef36728ebb9ce095e9bdc1ed7c76ae9_JaffaCakes118
.exe windows:5 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 44KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE