eee3b1bb36e7e00e310be6776ea29444_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eee3b1bb36e7e00e310be6776ea29444_JaffaCakes118
Size

227KB
MD5

eee3b1bb36e7e00e310be6776ea29444
SHA1

63c62fa9fc10bc7a07a40f656711392117da828b
SHA256

6987dbc078c3c738330ae9214b5ba89da25b1a1fd2b2398f50bb201f651941e3
SHA512

f29e538a1ce1bf5758e2c4169c48e3eb3a760263a7f8fe1f7f3a0b7e06163c8a1428c66b64b0f6a3b8a1781c65dfaaa5e2ef1036139fba1cb6c6e6055ae2c650
SSDEEP

6144:jStm/jKqBnJm8hExu76jyApvYNIEor4oiozLuJlUL3:jHRqAkuMKNIEovHqvU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eee3b1bb36e7e00e310be6776ea29444_JaffaCakes118

Files

eee3b1bb36e7e00e310be6776ea29444_JaffaCakes118
.exe windows:4 windows x86 arch:x86

770f42d05e7a5a3bb414ab355525fe37

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

ReleaseSemaphore
GetProcAddress
ExitProcess
LoadLibraryA
VirtualAlloc

Sections

.text
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 111KB - Virtual size: 358KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ