e841f287528f5d7361e7b67deba3a348_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e841f287528f5d7361e7b67deba3a348_JaffaCakes118
Size

136KB
MD5

e841f287528f5d7361e7b67deba3a348
SHA1

819d967ac9a8d95524656cd3e2a2b90c74c597b8
SHA256

e17aec046a9c0f22a729de80b74dcca2de7f4b3ef2de1e3ab85e02ca7b9de19a
SHA512

14dec9674935241236ba76d7f08a58ea3336b13a345e4c9e0a54909e0a944d20f38c79d0229a8b1bf08cc8204f938628ce36989f1cc502b1b5e1ed5e74807a27
SSDEEP

3072:wC7VMlcMK+N+fPlRlBjZqMNSSfFp7w3JT7bepO8Uk7Cf:jK+MK+NoNv9Hmncs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e841f287528f5d7361e7b67deba3a348_JaffaCakes118

Files

e841f287528f5d7361e7b67deba3a348_JaffaCakes118
.exe windows:5 windows x86 arch:x86

4f583500c29535462f4c51bb1ea9c86d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
EnterCriticalSection
Sleep
LeaveCriticalSection
GetLastError
WideCharToMultiByte
VirtualAlloc

Sections

.text
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 250B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ