aa2e9829234de334a4d1eb2216c7e991_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aa2e9829234de334a4d1eb2216c7e991_JaffaCakes118
Size

115KB
MD5

aa2e9829234de334a4d1eb2216c7e991
SHA1

0837b0289d7a63bed451dcfc43591bf1419effb4
SHA256

6e22f013188bff1af6109fd355e7ac33ab5cb5d406ed7fff804cef0429c41d5d
SHA512

d1a279782f0b9955a31de51f50da8bb2431500721c627f4ce38bcc521194963c217aadff1c1db91728460087dd50ef15cbf23c6bebbf5da06c897d59c4079f8f
SSDEEP

3072:wQAoaeLhSPsR80/7PB5cBeZW879+Jkz3KPfq/b:wQAawP080DZ5cBeg8713K6/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa2e9829234de334a4d1eb2216c7e991_JaffaCakes118

Files

aa2e9829234de334a4d1eb2216c7e991_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0c12c1d512453ee9c2574ef52bc5167b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_ISOLATION

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleW
VirtualAlloc
GetProcAddress

psapi

EnumProcesses

Exports

Exports

reqwqs
sfdbee

Sections

.text
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 407B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE