8e82eb7c5f19d95f45bce2f22732fc94_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8e82eb7c5f19d95f45bce2f22732fc94_JaffaCakes118
Size

859KB
MD5

8e82eb7c5f19d95f45bce2f22732fc94
SHA1

bdaf87d94f78f1e9f3109eb75926f2b21e106a3a
SHA256

311c4a4d06dcbf6abd667b7ccc591b17f139d2c8e40a9e28004beb00542e5011
SHA512

7fc9f5bbdc1c1b9c5625345a98c77a59f285bd8858b9d95961da9b77fb523cf08bda2e308dfee9ae0d89bba9034a451994b4c96589dcb0fcbe3159eb92df90dc
SSDEEP

12288:/bHRuQyFsEz2JNBI2PDozuboPCzkELKN3ECw5uAL5jie8khKqf/a+tJL/HFifknH:/1eJES6bAN3gxce8khxfC+TL/HFikxx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8e82eb7c5f19d95f45bce2f22732fc94_JaffaCakes118

Files

8e82eb7c5f19d95f45bce2f22732fc94_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dae2264e721d7c66f7fa35e864d11aba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA

Sections

.naked1
Size: - Virtual size: 1.8MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.naked2
Size: 849KB - Virtual size: 852KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ