eae3aa3d533ffb87c782d903136db79c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eae3aa3d533ffb87c782d903136db79c_JaffaCakes118
Size

264KB
MD5

eae3aa3d533ffb87c782d903136db79c
SHA1

61a47fb6a5f82c4feb327f78a48b116f0cffa474
SHA256

d69c604120cb3f16e3383e0359fc6b3f79a92f4ec9b96fbab1dfaebc5ab9fd49
SHA512

26f8fe44e737a2ae7e61ac82a1c58b62f469b6f1907bab07fca9ce886f64dc260f2c551a38a6fcce6f9c6befe544fe2c6413c07aa7dd07b3efe07c4e462d770d
SSDEEP

6144:k/qf4cr3qwF1GVFiADdBHQNQ6+5XpwaB2pxE:k/HBe0Bwe5XNSxE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eae3aa3d533ffb87c782d903136db79c_JaffaCakes118

Files

eae3aa3d533ffb87c782d903136db79c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

cb5bc4d6ebb5cbe899921a1e9c2e102c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

StrToIntExW
StrCSpnW

kernel32

LoadLibraryA
VirtualAlloc
GetProcAddress

Sections

Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 257KB - Virtual size: 428KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ