5e1b4eac9d3b7b9c37482e2320c877bf_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5e1b4eac9d3b7b9c37482e2320c877bf_JaffaCakes118
Size

116KB
MD5

5e1b4eac9d3b7b9c37482e2320c877bf
SHA1

2d174b10089e7082be94881a0b65723f97adfc2d
SHA256

520cb0bae7c76df2eb14ccc4d64c0aff10f8fad5925cfecb1edd7970ec0ddfc1
SHA512

6a2b98cb3028da41133fcde72ed7482c8b5eb338ac0485b52b2a720cde74bea0d323b35f1f8e55e5acd4908fa285cdea4c163b9896bcffd70757adc80416f4fc
SSDEEP

1536:g6/TZkzvh8PixzJWEh178or3zS0pRG+AxPUyCabpGKV606VmgUw76px+Y7:gqTyqixzJxh178oHNpRnA2yCK4Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e1b4eac9d3b7b9c37482e2320c877bf_JaffaCakes118

Files

5e1b4eac9d3b7b9c37482e2320c877bf_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b1cc2a268ce7a37beec5b43f80fffa59

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
VirtualFree
Sleep
ExitProcess

user32

CharNextA

Sections

.text
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Bdoiggpf
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Grytbbeh
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Rxeilciu
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 205B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 101KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE