3360bf6da10ec554785b58a248b67130_JaffaCakes118 | Triage

Sharing

General

Target

3360bf6da10ec554785b58a248b67130_JaffaCakes118
Size

96KB
MD5

3360bf6da10ec554785b58a248b67130
SHA1

ff292d0f8d580d84e15005aead2b49c056e66ccf
SHA256

da9433d21dd0db59f0f70a373fca9fa7677d305746b776f49368f742c3398805
SHA512

1652a008fe8c4fcca29762094c7ae74a04cde19bd491ceed4e326cd78f6b1ddebf6940d8acc84209d973fb675952a371628ea71d810608ba9eafd34c1389cbb5
SSDEEP

1536:awpikYgFVvxZ5zZ1e3HCFe4tUW5wD+dkjrSttihsV7l+/D9hkdrXtcGu0:awpZYQVZZ5LybMUWY+dcY2k+JhkdrXtp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3360bf6da10ec554785b58a248b67130_JaffaCakes118

Files

3360bf6da10ec554785b58a248b67130_JaffaCakes118
.exe windows:4 windows x86 arch:x86

40214966105318bbf40a3471a995f63b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
TryEnterCriticalSection
VerSetConditionMask
GetAtomNameA
IsSystemResumeAutomatic
CreateJobObjectA
HeapReAlloc
_lclose
GetStartupInfoA
ExitProcess

Sections

.text
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

WEIJUNLI
Size: 4KB - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ