09087dcc4a7aea77e6577a47947c72de_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

09087dcc4a7aea77e6577a47947c72de_JaffaCakes118
Size

360KB
MD5

09087dcc4a7aea77e6577a47947c72de
SHA1

21e72e0a4ca53a152425e458f69e3196b97c67f4
SHA256

ce47fe4db5e6a984b43d957e65bb4bb29011ff082b0844a5b3b22590de27fdf9
SHA512

aa36022f301d965a19b2d38273d04684a9c34a3659c1cb871a683a70678637c6696ae510735249a96376cabd95599521d02c7b8e8e563880c007a3edf8b93c47
SSDEEP

6144:N+Qk1Naokes1NBXnptigsZ9JQVUA0kRTGup2tFCfhvPAyNPBj3f9qTIvbFfW:sQk1KPNgZzIRTGA2twZvPRN5zf9qTIv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
09087dcc4a7aea77e6577a47947c72de_JaffaCakes118

Files

09087dcc4a7aea77e6577a47947c72de_JaffaCakes118
.exe windows:5 windows x86 arch:x86

939eadbd57de66bdbad81beef621b752

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
LeaveCriticalSection
DeleteCriticalSection
TerminateProcess
EnterCriticalSection
CloseHandle
VirtualAlloc

Sections

.text
Size: 342KB - Virtual size: 342KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 262B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ