ef84227251f3f74f654ee99e820c3912_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef84227251f3f74f654ee99e820c3912_JaffaCakes118
Size

38KB
MD5

ef84227251f3f74f654ee99e820c3912
SHA1

6fae6ff09dc00ea26180861febf76e98e7ff837f
SHA256

a25f799da4ee0b9e404a900522ead454e0773db4c3e6c83c08c4c13676fed034
SHA512

4f43c74ebcb9f24216415a412602dac14aef1c8372411104d0d06ca6831aa3eff909f1f3b753b66f25e6fd488fa18b59d680e49de668f4775d8ac5ce3d55f674
SSDEEP

768:NRPWjmO721RLLtHvuNhHgrfxja3vYuiOPJJ1:NEjmO7eR3tm85Sg3MJD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ef84227251f3f74f654ee99e820c3912_JaffaCakes118

Files

ef84227251f3f74f654ee99e820c3912_JaffaCakes118
.exe windows:4 windows x86 arch:x86

50eda9823ce97668b0a65bdf8b3a93e5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtect
GetProcAddress
LoadLibraryA
GetModuleHandleA
ReadFile
WriteFile
CloseHandle
CreateThread
CreatePipe
ExitProcess

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 356B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 261KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 736B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ