3f1fb8872fb0fac7866be09c53f783bf_JaffaCakes118 | Triage

Sharing

General

Target

3f1fb8872fb0fac7866be09c53f783bf_JaffaCakes118
Size

119KB
MD5

3f1fb8872fb0fac7866be09c53f783bf
SHA1

d572f106405a845dfb886cf1c9ff1da205a2c5ef
SHA256

2acc3c1768d43cb9870226d4b3ca3d5c9c51e20ff32bf31bb1174d70771195bd
SHA512

ffe29e45b04fedba4d2ed5719df5fd80c575d6eef92c00e4288cafc1a4bdeb25343b3dcfbd89e29b39ac6f8870b29c272fe08fa8d2c22e4a83e23f94fb7c8a80
SSDEEP

1536:tF9UdDKVoohwdUhxB6pXvoNn5V8X83jMMSRczW6NtKHxDUjMm/a7Gd221z:/udOaohwffoNn5V68TMZKFtkDUngGgC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f1fb8872fb0fac7866be09c53f783bf_JaffaCakes118

Files

3f1fb8872fb0fac7866be09c53f783bf_JaffaCakes118
.exe windows:5 windows x86 arch:x86

a02d6a33ab5a73dc7f5e6f4b88445800

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
Sleep
WideCharToMultiByte
TerminateProcess
DeleteCriticalSection
CreateFileW
GetCurrentProcess
SetUnhandledExceptionFilter

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 280B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ