eee180181243fbb032c827d1a0de7a14_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eee180181243fbb032c827d1a0de7a14_JaffaCakes118
Size

765KB
MD5

eee180181243fbb032c827d1a0de7a14
SHA1

a6ccb490a5dc1d75025e3a54c1822498ac551e5d
SHA256

a2d937cc6b79e4ed60ae0a6314719e9f8181c394a992a989c4e6e435db879d4c
SHA512

b9c90c507126de3b99ab72a15b9e49da110b07d60957468ad514f4f3a7af2e1b1ffa27ba42b827da42733d5716eab7ab292777b67944596cc9193d75cd3fbaf0
SSDEEP

12288:ZpI5CQgFrMhhIgNTGI74Vkrr+5INoI4GnrK+yY0IN+NRdenk:3EYgNvvmINwGJoek

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eee180181243fbb032c827d1a0de7a14_JaffaCakes118

Files

eee180181243fbb032c827d1a0de7a14_JaffaCakes118
.exe windows:5 windows x86 arch:x86

8994e45d1441e2165228f93602f7c6d6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
LoadLibraryA
ReleaseSemaphore
GetProcAddress
ExitProcess

Sections

.text
Size: 191KB - Virtual size: 191KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 190KB - Virtual size: 189KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 380KB - Virtual size: 382KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ