a0ef3ef86bb9a6567f501dfaa04c5ac7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a0ef3ef86bb9a6567f501dfaa04c5ac7_JaffaCakes118
Size

287KB
MD5

a0ef3ef86bb9a6567f501dfaa04c5ac7
SHA1

46dad695067b2c1279acabd33367185be4d542c4
SHA256

191e0516eda2be4631ef83fcc923295e08566cff8449b3216b489ed4f61b27e7
SHA512

30fa512f0b4bc380f12f4e6f1f59b044b38ed49c0229e0fe120d115ff4e26453b60a1a4a299bd09b18412ab685b851170450085c14cf59d5565b20c9456cf8a8
SSDEEP

6144:WaQWxDJSRzU1+8LED2M8nP+5U+raQ9nbXgCg58QTA:WaNiA1+8LED2M8H+rPNbXgCOU

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/For Win7 - No Menu.exe
unpack001/For XP - MENU Hack.exe

Files

a0ef3ef86bb9a6567f501dfaa04c5ac7_JaffaCakes118
.rar
For Win7 - No Menu.exe
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 36KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
For XP - MENU Hack.exe
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 236KB - Virtual size: 276KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Read for Work.txt