e75633fe6d6dac63851284a58f37859d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e75633fe6d6dac63851284a58f37859d_JaffaCakes118
Size

85KB
MD5

e75633fe6d6dac63851284a58f37859d
SHA1

e58f23a542f6fb481274cd52fe91d3a8e4a627da
SHA256

7dddadaf211ebd5df10d7505540e05fdbb70f28f11703dc3b15b4ce656d3be74
SHA512

c604cd052f9b128a0e2b1e599bd86477c6846a488b6a7968dcef6285b15e2a11550e199e149bde1e02980010d9f99592aafa2d8ba96403ca8a2ac6f025b512ff
SSDEEP

1536:4NXZ3I9hJgdG+yYiJKJViNRkiygdR5tvV51E2F/HWrqlk:Q3IXGYKiRHygXjxvOz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e75633fe6d6dac63851284a58f37859d_JaffaCakes118

Files

e75633fe6d6dac63851284a58f37859d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

fffd9566f06cae802a77a95301407935

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LeaveCriticalSection
Sleep
EnterCriticalSection
SetUnhandledExceptionFilter
GetCurrentProcess
VirtualAlloc

Sections

.text
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 232B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ