cee8ae0abfd3d00331dd6979e0b6ca79_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cee8ae0abfd3d00331dd6979e0b6ca79_JaffaCakes118
Size

42KB
MD5

cee8ae0abfd3d00331dd6979e0b6ca79
SHA1

4d4411af2e467416a3e2c98ba2e6174272e3885a
SHA256

bc906f99d2d94841c9c4d8575148aaae91d00683c6db4fc3eb5ccd91889ea2c4
SHA512

fc534d97b11d12295b5d4d7ebbdee45d072f828b710e26f74b70891c7533d9c6d3ed0d96d44a686a877b4bcb301bd800259da29b6f5c25ae1ba1fbc3dc18a5ee
SSDEEP

768:ZyVaiRQuGPb3AnZdUsJM8tqaiWLJ1BAUYvVudzdF+Rl9jelaHI:4QIZ/M8tBiW9Su1dFE9o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cee8ae0abfd3d00331dd6979e0b6ca79_JaffaCakes118

Files

cee8ae0abfd3d00331dd6979e0b6ca79_JaffaCakes118
.exe windows:4 windows x86 arch:x86

074745fd9ff3eae0e009c32dd12c5041

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleHandleA
GetSystemTime
GetTickCount
HeapAlloc
GetProcessHeap
HeapReAlloc
HeapFree

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 364B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 752B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ