1883f967cc6e24645a5090c3b8e67ea8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1883f967cc6e24645a5090c3b8e67ea8_JaffaCakes118
Size

479KB
MD5

1883f967cc6e24645a5090c3b8e67ea8
SHA1

1df652ffedd6e64b1956cf02b4281940708578c7
SHA256

72ba0deea04b6270cd341ae4740a02212b96d48438d435d7c5bd807fbf6a5722
SHA512

c7f24a71835b49e35375a05b52e5cc8254c9ebdf37020dab17427e246a2b843ab55b13483b6a7040fbdd37ec9f479acf5cb8eba755fda43675bb0272fd3a0ef9
SSDEEP

12288:R5uZTKx4UQif3+R3mh0SOvenYdVYIL5mTDArMJbUHXqDkfWr:RYr+LnlY+g3Hs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1883f967cc6e24645a5090c3b8e67ea8_JaffaCakes118

Files

1883f967cc6e24645a5090c3b8e67ea8_JaffaCakes118
.exe windows:5 windows x86 arch:x86

528d4804a3f59fd05df85f22fbf37a2f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleW
VirtualAlloc
SleepEx
CloseHandle
LeaveCriticalSection
GetLastError
GetCurrentThreadId
SetUnhandledExceptionFilter

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 278B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ