Overview

overview

3

Static

static

3

e0ea999dc8...18.exe

windows7-x64

3

e0ea999dc8...18.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    e0ea999dc8b6fc8b20925b5bc9b799a8_JaffaCakes118

  • Size

    14.8MB

  • MD5

    e0ea999dc8b6fc8b20925b5bc9b799a8

  • SHA1

    e612995771203ac493fe87ea8e6f85345db9f193

  • SHA256

    a02fea8ffd2309d4b671b9390a49d7c2770334d8dea0aa48e2a42b6cdeea66b6

  • SHA512

    0074405f70d31254a28c2f3120cf49afa92587f13324ce3a6e614c3e2229920162f966f5d9c0d5c6331070142a14944812040e1abeff7063f04ebb77d845ff86

  • SSDEEP

    49152:oirjjHr93GZSNEM00zi553XbOTXYNOclGGdkrb4jJABxN4ZKLmugHJeo/JRCbuRo:oijHr93Ze3XW+vG2dHN3Z4J22PhD

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e0ea999dc8b6fc8b20925b5bc9b799a8_JaffaCakes118
    .exe windows:4 windows x86 arch:x86

    5e575945a91b4e45aabfe51dd1faaaf2


    Headers

    Imports

    Exports

    Sections

  • .data
  • .didata
  • .edata
  • .idata
  • .rdata
  • .reloc
  • .rsrc/0/RCDATA/DVCLAL
  • .rsrc/0/RCDATA/KCJSNEWOBGAQRRT
  • .rsrc/0/RCDATA/PSVPVEX
  • .rsrc/0/RCDATA/TXTXAFTVQXTS
  • .rsrc/0/RCDATA/UIYDUQ
  • .rsrc/0/STRING/4078
  • .rsrc/0/STRING/4079
  • .rsrc/0/STRING/4080
  • .rsrc/0/STRING/4081
  • .rsrc/0/STRING/4082
  • .rsrc/0/STRING/4083
  • .rsrc/0/STRING/4084
  • .rsrc/0/STRING/4085
  • .rsrc/0/STRING/4086
  • .rsrc/0/STRING/4087
  • .rsrc/0/STRING/4088
  • .rsrc/0/STRING/4089
  • .rsrc/0/STRING/4090
  • .rsrc/0/STRING/4091
  • .rsrc/0/STRING/4092
  • .rsrc/0/STRING/4093
  • .rsrc/0/STRING/4094
  • .rsrc/0/STRING/4095
  • .rsrc/0/STRING/4096
  • .rsrc/1033/CURSOR/1
  • .rsrc/1033/CURSOR/2
  • .rsrc/1033/CURSOR/3
  • .rsrc/1033/CURSOR/4
  • .rsrc/1033/CURSOR/5
  • .rsrc/1033/CURSOR/6
  • .rsrc/1033/CURSOR/7
  • .rsrc/1033/GROUP_CURSOR/32761
  • .rsrc/1033/GROUP_CURSOR/32762
  • .rsrc/1033/GROUP_CURSOR/32763
  • .rsrc/1033/GROUP_CURSOR/32764
  • .rsrc/1033/GROUP_CURSOR/32765
  • .rsrc/1033/GROUP_CURSOR/32766
  • .rsrc/1033/GROUP_CURSOR/32767
  • .rsrc/1049/GROUP_ICON/MAINICON
  • .rsrc/1049/ICON/1.ico
  • .rsrc/1049/MANIFEST/1
    .xml
  • .rsrc/1049/RCDATA/BUEYHJ
  • .rsrc/1049/RCDATA/BYPMOYAGGDUFLAQHEAH
  • .rsrc/1049/RCDATA/CVOQQNWJBLIX
  • .rsrc/1049/RCDATA/ELCIENFHQQEQWKPYL
  • .rsrc/1049/RCDATA/IAIKWBTB
  • .rsrc/1049/RCDATA/JLWIHJMTBEBO
  • .rsrc/1049/RCDATA/KYBXKEOYIKKKIVUXVME
  • .rsrc/1049/RCDATA/LJUJIUFFMSOJVYNMCJN
  • .rsrc/1049/RCDATA/NDEHXKTIASUDRCJOPGS
  • .rsrc/1049/RCDATA/NLSYJWWHTPUIQFX
  • .rsrc/1049/RCDATA/NNYHFERPKSGAKEIXFCDJ
  • .rsrc/1049/RCDATA/NPDOOQMMRJCB
  • .rsrc/1049/RCDATA/RGHPDUSDJLNE
  • .rsrc/1049/RCDATA/SJNFWQSKSLQHROYX
  • .rsrc/1049/RCDATA/UTKSNOFL
  • .rsrc/1049/RCDATA/VHWFNWWM
  • .text
  • .tls