e8fe20618779a81c3144f4c0e49a812c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e8fe20618779a81c3144f4c0e49a812c_JaffaCakes118
Size

469KB
MD5

e8fe20618779a81c3144f4c0e49a812c
SHA1

c17f4a3fd98c10013553952cc87093389649a22f
SHA256

c189116e7a37b93cb4c2c44298031cd64a61910e72fe88ea1b711b49cd245640
SHA512

9ff414f57a150916163319eecd011ed014e178f9a55a3d85e35dd2c2d610fe9ece3ee09baa23cb42259490510c8ede230356463aff1babd14997574eeeae4617
SSDEEP

12288:hQ44bFE9Od5HbnSic6L+ChloMMMM/fWf4UQM:hp4bFCu5rapCLoMMMM/A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e8fe20618779a81c3144f4c0e49a812c_JaffaCakes118

Files

e8fe20618779a81c3144f4c0e49a812c_JaffaCakes118
.exe windows:5 windows x86 arch:x86

2045eb5835797f38246afe5d075815e1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleW
VirtualAlloc
GetCurrentProcess
WideCharToMultiByte
CloseHandle
DeleteCriticalSection
CreateFileW
EnterCriticalSection

Sections

.text
Size: 342KB - Virtual size: 342KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 280B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 320KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ