c1e8cd47eb8ba788216c4066177513b9_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c1e8cd47eb8ba788216c4066177513b9_JaffaCakes118
Size

20KB
MD5

c1e8cd47eb8ba788216c4066177513b9
SHA1

d557bb65f7ecd93d09eb890bf4bf31f6b7095f07
SHA256

791f53d4811244ed9f2f1e985de11f4671dc254ec17ca7c3b36cc227495a10a5
SHA512

3cef9099da32e22f374373ff2ec2010edaf5f186aae2c950a8efbc85badc1d1f3cfea2ab87c272f1b711ea54a7f62743b37981e63be45743f9a87eca74695dc6
SSDEEP

384:Vbpl5EYG3I6Els+StnCVkqA9DQOBSa9kvPTBHqd54pvJiyn4gb+:Vdlt6ElsJt6w1QWkv1KeRnf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c1e8cd47eb8ba788216c4066177513b9_JaffaCakes118

Files

c1e8cd47eb8ba788216c4066177513b9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

5ae12c707f94a1f2b23c70e2b7edde84

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
GetCurrentThread
GetProcAddress
GetThreadContext
HeapAlloc
HeapCreate
LoadLibraryA
ResumeThread
SuspendThread
VirtualAlloc

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ