39967bc5dab6899d1360d8e62f59d0d0_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

39967bc5dab6899d1360d8e62f59d0d0_JaffaCakes118
Size

22KB
MD5

39967bc5dab6899d1360d8e62f59d0d0
SHA1

549c0a4a9e675863c1c75b43f3ed3acec67b86df
SHA256

52d77e6923151ffb9fabae97188bc6c8fe8652618ec5813e80d52e794b737ddb
SHA512

065a02e5887528a41f10f23e4482dc05e825ce33b4e477bbaba0a477bc6c10bdc52dce428d3c6dd16227ea09dec889ed495b9053b190f5c4e996165b4ff49e82
SSDEEP

192:8pwJJl39lvbwqMMFClLO+OraozXgTUCreYVJZEOlrDJObQCwoZwoeWltjVf:L/7MMyO+OrBNCCOZHlRVC1ZwoplVVf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
39967bc5dab6899d1360d8e62f59d0d0_JaffaCakes118

Files

39967bc5dab6899d1360d8e62f59d0d0_JaffaCakes118
.exe windows:5 windows x86 arch:x86

e83529d23c446f9cb0993f5c590e53bb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateEventA
OpenEventA
ReleaseSemaphore
GetModuleHandleA
CreateFileA
LoadLibraryA
ReleaseMutex
GetProcAddress

user32

CloseWindow

gdi32

CreateBitmap

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 97B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ