00e90dfc7b792324ead308fdd09bab00_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

00e90dfc7b792324ead308fdd09bab00_JaffaCakes118
Size

11KB
MD5

00e90dfc7b792324ead308fdd09bab00
SHA1

fee475dedfa6d3067fdbf8f7326a0dd31e03a0a0
SHA256

66a1a9ef66ef1cb95534a9b59158713639ddddf9cd215aa24fbf148d9d4f74a3
SHA512

6c9afe6ee2ab488a6cc82a8fdff3ef4a97f93ca5eccf3551f9601b7ca95f051ff1df478d1026c46fec99957eec7d29c78c675ee98947e20ae19f591911b13b2b
SSDEEP

96:sOxhylURR8JqjBeoIh6StwKBNi+x8d1hI5XhLMqeVPs8D1nDfCkofgK4w4o6JyH3:sOzy0sZ3Ni3d1qyPykDsYK5P7uXu+6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
00e90dfc7b792324ead308fdd09bab00_JaffaCakes118

Files

00e90dfc7b792324ead308fdd09bab00_JaffaCakes118
.exe windows:5 windows x86 arch:x86

d05f402d75d8b88a33c133c9b24bd659

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
CloseHandle
MapViewOfFile
CreateSemaphoreA
OpenSemaphoreA
CreateFileMappingA
LoadLibraryA
GetModuleFileNameA
GetModuleHandleA
SetCurrentDirectoryA
CreateFileW

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 97B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ