e03b9b1af3ca42ce4e7c0547d0d8af46_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e03b9b1af3ca42ce4e7c0547d0d8af46_JaffaCakes118
Size

257KB
MD5

e03b9b1af3ca42ce4e7c0547d0d8af46
SHA1

5e5f46d1c597bd13ae98f63486e56a01b875d6ea
SHA256

e663c3f4d75ee5bb254c5c509a67d8e844eb9b1b97b6f01d3fd1b3df86da285d
SHA512

756cdac5f60e9e211073acf8ba9dbdde06c6013217826f59f50a43b227b81bc5fb8480bdf8f33e93896f59ee38d9bf38115307bc74904d82a49533dc839f6ea5
SSDEEP

6144:pzUYWCPTYAzOEQ+Gs7eSCbdW5wpGVNzaehrIU7WclqM0ON/c2:iYWvAzHGsyvUypGfSuqXON5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e03b9b1af3ca42ce4e7c0547d0d8af46_JaffaCakes118

Files

e03b9b1af3ca42ce4e7c0547d0d8af46_JaffaCakes118
.exe windows:4 windows x86 arch:x86

4b1fd2a6ad1bc01dea06ebc67ba91275

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\Download\test123\3434\Release\3434.pdb

Imports

kernel32

LocalAlloc
GetModuleHandleA
_lclose
_lread
_lopen
GlobalAlloc
GetSystemTime
GetModuleFileNameA
GetProcAddress
LoadLibraryA

Sections

.text
Size: 1024B - Virtual size: 605B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 446B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ