4e16b684eb04ddcc1fda171d36af6cf8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4e16b684eb04ddcc1fda171d36af6cf8_JaffaCakes118
Size

469KB
MD5

4e16b684eb04ddcc1fda171d36af6cf8
SHA1

32a8f283caaf3e4926ce8c36ddbe951126a5bc20
SHA256

dab4a44e596ac78cd296146d1f6d771bc7c928da918ee71f5e25543dbb7c294d
SHA512

134f9a9541d0f3cdd466cced3de5dd196fd8bee94bd15f5c82b200aef45fa3fab98ce79e4364b268b6e81682294834e2885c4606b98ed3b0fb0d0685ec0a7c14
SSDEEP

6144:gf3KP+/7C87hx4IZvcRI+j8giqIo+lV5hIZWrAeU9GHZ+mYaffWjk2gZcCDUQt:S3bu87hmkn+IHxIEAmAmhfWjkE4UQt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4e16b684eb04ddcc1fda171d36af6cf8_JaffaCakes118

Files

4e16b684eb04ddcc1fda171d36af6cf8_JaffaCakes118
.exe windows:5 windows x86 arch:x86

43c79cf405f312cbd4b768e7e9857162

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleW
VirtualAlloc
EnterCriticalSection
GetCurrentThreadId
GetCurrentProcess
DeleteCriticalSection
Sleep
LeaveCriticalSection

Sections

.text
Size: 342KB - Virtual size: 342KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 284B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 276KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ