15fbbb2916dfc50945137eed40995b2f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

15fbbb2916dfc50945137eed40995b2f_JaffaCakes118
Size

63KB
MD5

15fbbb2916dfc50945137eed40995b2f
SHA1

5ea706cb7c468cfdfa15e6f87c631311582ce979
SHA256

a479fa7b7913e6b35930a88102e4b76d8da62daecec1e3468e4f31155bf01e6f
SHA512

e9e0bc6b3052f6e430b76143c4e9800642e48643c6e4c08a22acaad47d085e0f958ffc9c482b0a7fcf7f5476901269e2ea80e2c772d1dd630f432b7876794008
SSDEEP

768:taqd/4Aphn491GsHJktxPQHCHfPumQAotjO78s2ShLaACeRB5rSJ7pzWUvEgWaaE:t1JfnO7AUjFsHPT5ItWeEyygEtmN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15fbbb2916dfc50945137eed40995b2f_JaffaCakes118

Files

15fbbb2916dfc50945137eed40995b2f_JaffaCakes118
.exe windows:4 windows x86 arch:x86

51a4a27c81f85c53ca90901b91f196e9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LeaveCriticalSection
ConvertFiberToThread
IsDBCSLeadByteEx
DebugSetProcessKillOnExit
TerminateThread
GetNativeSystemInfo
EnumResourceTypesW
FlushFileBuffers
QueryDepthSList
SetThreadPriority

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE