8eedcd767a3957db1049f5e50914d197_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8eedcd767a3957db1049f5e50914d197_JaffaCakes118
Size

269KB
MD5

8eedcd767a3957db1049f5e50914d197
SHA1

f2240a829b82fe8b22425df7a0b33c88200015e3
SHA256

930794d4d8075cc70c701764c4632c5607906876151dcd854eb6f0464e867ff4
SHA512

4fd10c671ae56240285866c6835cbfd3e09072878a80067de1af7ea4435b04b8c1eb42e5561720cae6394193a58bd9f3995e2a8b9be9e0582a17b66474966538
SSDEEP

6144:mNkVsuaRaU6mHGhEvBUVV6YlyhSp+wRQ1KOqCukP:g0aRz6mHGhEublESpRRQjZ3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8eedcd767a3957db1049f5e50914d197_JaffaCakes118

Files

8eedcd767a3957db1049f5e50914d197_JaffaCakes118
.exe windows:4 windows x86 arch:x86

bd51a645a9c68bd03b2e51586e5cbdcb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA

Sections

13^1
Size: - Virtual size: 332KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

13^2
Size: 108KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

13^3
Size: 141KB - Virtual size: 141KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE