aef9fcbde1f10372eabfabe2a799dccd_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

aef9fcbde1f10372eabfabe2a799dccd_JaffaCakes118
Size

111KB
MD5

aef9fcbde1f10372eabfabe2a799dccd
SHA1

f1080ce5a9184b51550428d1b782a45f14989d56
SHA256

d305182f7793ff57d7308cba3e4d952131a676ee38a3784a0ce7149ac8185c2d
SHA512

0ad415d975cd6b1814885a3974d08454a3dee857aa431edf37299773f866b0def82b640d0f080d67c62a0ad02ffce9b6827e4a4e4d17d2f88ee7d68b044bbd2f
SSDEEP

1536:XZIDwSuf4r3Ogv32gjfnRIXj7EKFBFzOUHvawv48FFlnb:Xmsz4a4fRIXj7xjHSy48hb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aef9fcbde1f10372eabfabe2a799dccd_JaffaCakes118

Files

aef9fcbde1f10372eabfabe2a799dccd_JaffaCakes118
.exe windows:5 windows x86 arch:x86

87bed5a7cba00c7e1f4015f1bdae2183

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 460B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ