JaffaCakes118_e15bcee8ab661859c75ba636d063ddbf | Triage

Sharing

General

Target

JaffaCakes118_e15bcee8ab661859c75ba636d063ddbf
Size

101KB
MD5

e15bcee8ab661859c75ba636d063ddbf
SHA1

7756e5bc555f679d9451b1cec9d749e328156276
SHA256

1c27ce80f76fd2cddd0e0b6bd41da98d27837a3e9783d0f8a79ed3a6bd7e5c23
SHA512

e044fd3b65f68b2af48f5e9b14c1b0c14c3a7431a80f9aec8cd879d8f4945f2c5a8e6c1c2a3af589c32a3d4eaa7f78a203c26e15f9e46bfae89edc67eba0a9fb
SSDEEP

3072:vDSKiauBZz/DhceNw1OTw+XIU5jwaaHw7Koj4rBzf3:rSKbwhdcqYIhXNA73

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_e15bcee8ab661859c75ba636d063ddbf

Files

JaffaCakes118_e15bcee8ab661859c75ba636d063ddbf
.exe windows:65535 windows x86 arch:x86

d266caec701d31753cc424a17d4dea44

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
CreateFileA
VirtualProtect
GlobalAlloc
VirtualAlloc
GetDateFormatA

msvcrt

__set_app_type
__setusermatherr
__p__fmode
_except_handler3
_adjust_fdiv
__p__commode
_initterm

Sections

.text
Size: 60KB - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsr1
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE