e1ff415832823fe3c1a0becfbfca40a8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e1ff415832823fe3c1a0becfbfca40a8_JaffaCakes118
Size

143KB
MD5

e1ff415832823fe3c1a0becfbfca40a8
SHA1

21900e9986d0229adf89aa4a47f02e15a6cce6f7
SHA256

2e2f902b59999a13acc1e39e6c4cd33c8eb022263cc2ebc0c481bfeffa288703
SHA512

f0b01133433642954a9cb502fee0cb41b036454b51b452e5bac3aec60d371ebd1513e3710db1b32f30af849900e1d6f2bdc9093d7577bc07ff2692a605e88fe4
SSDEEP

3072:ZTr1bNex6jxpN5CW7VWiMnNPQD+FPovf43MNALN/oRkuJ0FbXneZ/DoTd:ZP1b4ojTmW7NqNFW4cNALFoRkE0NneZQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e1ff415832823fe3c1a0becfbfca40a8_JaffaCakes118

Files

e1ff415832823fe3c1a0becfbfca40a8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

0
Size: - Virtual size: 176KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

1
Size: 136KB - Virtual size: 200KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE