eb49c956dabcb69aa57af7d307a45e54_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eb49c956dabcb69aa57af7d307a45e54_JaffaCakes118
Size

29KB
MD5

eb49c956dabcb69aa57af7d307a45e54
SHA1

33b67f7cc0cd5596ec4c6c62f5d7218832b859e3
SHA256

941a84855c70df161e70624094408ce8ac862a12b8d7a06c8310afb993439b71
SHA512

770d16196575a6dd908e463bc2032f88743ea79b7e4ad0d2b86b50d0089e4baf8a86b67e6e67c71873ffd2562a80a1d569925ea7731ad68fe8275c641fbfed37
SSDEEP

384:bLUv9Pyt17Q5kgKg5+lwlXRgk5Sz/Ew3Y/Ze1ekEUNZOBo+CyySSholRhkRzFOEZ:eixSKwTgk5A/Ew3L1PnLOSSVhSHd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eb49c956dabcb69aa57af7d307a45e54_JaffaCakes118

Files

eb49c956dabcb69aa57af7d307a45e54_JaffaCakes118
.exe windows:4 windows x86 arch:x86

fd08a4f9214adbf593e8bb626a071957

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DisableThreadLibraryCalls
GetModuleHandleA
GetCurrentProcessId
QueryPerformanceCounter
FreeLibrary
GetSystemTimeAsFileTime
VirtualAlloc
SetLastError
GetProcAddress
GetTickCount
LoadLibraryW

ntdll

NtAddAtom

atl

AtlMarshalPtrInProc

Sections

.textbss
Size: - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 424B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 448B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ