efbb16abd74706bd06603c59b11e48ae_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

efbb16abd74706bd06603c59b11e48ae_JaffaCakes118
Size

54KB
MD5

efbb16abd74706bd06603c59b11e48ae
SHA1

b8ec7f64760eea2c7f62e8bdeaa9d40ad38164cf
SHA256

0f1b5f43c485d1a6835aec904a211bddbf513f61034851d31d993fe1e13a44ae
SHA512

151f0e0008daedffdd081595626b1cc836de6519352e3bc7872a0960626354af9e65be9b6300041553c0453b908d8d28be3dd965e7595bdfcca2d8eff672a1e4
SSDEEP

1536:9ZWKJJMguNNdxzHni3gkyAop4NGDqjL10I:9ZWKJKVNdxDrkyAopCGmyI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
efbb16abd74706bd06603c59b11e48ae_JaffaCakes118

Files

efbb16abd74706bd06603c59b11e48ae_JaffaCakes118
.exe windows:5 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 44KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE