cef9a0edfb8d80e4899757f5f707b028_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cef9a0edfb8d80e4899757f5f707b028_JaffaCakes118
Size

285KB
MD5

cef9a0edfb8d80e4899757f5f707b028
SHA1

a2c54643c43040365c50e2c54991afe7da21a5ea
SHA256

7286969950f86acac80dc89421608ce3d0fa2f986d59d48e2704796c37bd1188
SHA512

6d5755c21c957a0774397b830c62608819350cf62a0b36a6c5b2a77d68a20e9f98602a4bc8dbb628c3ec4849570856f4f8fe1304e07da4445ead52623f49b503
SSDEEP

6144:bPPcy+oNoMY0F24rrMbFPrOLqN4T3A+Jb7nga+cvT8:bPU/oyUprrYDN4s+t7Wc7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cef9a0edfb8d80e4899757f5f707b028_JaffaCakes118

Files

cef9a0edfb8d80e4899757f5f707b028_JaffaCakes118
.exe windows:5 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 279KB - Virtual size: 520KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE