ebb6eedcb868b4940409ec48e73688b3_JaffaCakes118 | Triage

Sharing

General

Target

ebb6eedcb868b4940409ec48e73688b3_JaffaCakes118
Size

111KB
MD5

ebb6eedcb868b4940409ec48e73688b3
SHA1

9e5b7f1c4ba3eba88dd307e46af1d084cf5f8b03
SHA256

506342243db5998de802937dd8a1a0ce63bd4822703150a36469c8f22f55060c
SHA512

250773f7fc4745130de22e80b5c00102df81e7eb810d76c928af74dafcef315de7669f33095f5c36c8257ad43bffdc9f331ce105b229a4f7bfb2fbd963811f08
SSDEEP

3072:BmLm2L1szSZx3Y9+Up1LVGOEWLZbfMiqFflMs4h:BmvLGG3YwUpkWNXqtl6h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ebb6eedcb868b4940409ec48e73688b3_JaffaCakes118

Files

ebb6eedcb868b4940409ec48e73688b3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0c12c1d512453ee9c2574ef52bc5167b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_ISOLATION

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleW
VirtualAlloc
GetProcAddress

psapi

EnumProcesses

Exports

Exports

getBuss
getCuss
getMuss

Sections

.code
Size: 107KB - Virtual size: 107KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 379B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE