eabb3dcb44ba4a0f790df536c71a94b8_JaffaCakes118 | Triage

Sharing

General

Target

eabb3dcb44ba4a0f790df536c71a94b8_JaffaCakes118
Size

385KB
MD5

eabb3dcb44ba4a0f790df536c71a94b8
SHA1

6df79b8bf4ed5448adb1da68cc0bb58b998c3964
SHA256

8857be0484c0103b3a33cc2b7535cdf1107576a067accc47b5f468799903b5d7
SHA512

b1db5bb3c42ee84c53cd1e99264cdfe52c0a479cf04c26088e3148e4e26e9a0c91c29f7b9eba77f58b7edae75d35f3bf1bed62dbedf6f5fcca3ea841ba939d0f
SSDEEP

6144:nZlCR7mf+meRx/fXzbIqf0evAb0x8t9lUawjDprLSW5NQlSb1S1iLbr3JzpGB:ZlC5H3fIAubweMvjjySBS1inrNpI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eabb3dcb44ba4a0f790df536c71a94b8_JaffaCakes118

Files

eabb3dcb44ba4a0f790df536c71a94b8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

dae2264e721d7c66f7fa35e864d11aba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA

Sections

.text
Size: - Virtual size: 760KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 379KB - Virtual size: 380KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ