9fe007ff7507a18f9bff52d3a52bc170_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9fe007ff7507a18f9bff52d3a52bc170_JaffaCakes118
Size

11KB
MD5

9fe007ff7507a18f9bff52d3a52bc170
SHA1

cdb6cfd5eb6af4d07ffc3c7952db295e02d7bd19
SHA256

94fc8d83a9ebf62a81d34629eda4b5f8299531f2889e958bd1af29e1363cf0d0
SHA512

d9d60df7cfe5de967ab2bea793d417781a77b7b55e75eb661bb0512b7129a5057ef73a82f8a416ed307e78b1432be4c58ca5383b604068ba6dd3bb5fae11c72b
SSDEEP

192:AMDU8tvEydTyuy6lsdVo8+674V3g57GGdCWf:AMOytDy6l+Vo8Qwnd1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9fe007ff7507a18f9bff52d3a52bc170_JaffaCakes118

Files

9fe007ff7507a18f9bff52d3a52bc170_JaffaCakes118
.exe windows:4 windows x86 arch:x86

d7ddde62f42c89fbabb7dbe6d4656cfd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetFileSize
ReadFile
SetFilePointer
CreateFileA
TerminateProcess
ResumeThread
SetThreadContext
WriteProcessMemory
VirtualAllocEx
ReadProcessMemory
GetThreadContext
CreateProcessA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
HeapAlloc
GetProcessHeap

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE