63888a95a1f962c95e5b09c1ff4ffaee_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

63888a95a1f962c95e5b09c1ff4ffaee_JaffaCakes118
Size

423KB
MD5

63888a95a1f962c95e5b09c1ff4ffaee
SHA1

a8946b47f78fda6c24bf6808c1553cf5095c4539
SHA256

e8aba017265b124b034f7e93e2053623be673ed61425dcebd6458c107ad2a876
SHA512

103d22145ba6c08645eac3fb8136d5867027f98f10e7f5f35ebc4510a6ad9edb103886eeec92f41969124082606ddaeccc6049a62e80f47be3e572fe7329c1cb
SSDEEP

12288:1adLac1t6tb9Sf3T3/Xxja6mRLcXnQ+YrDeAuj5Xd:1+Gct0UfjvxNQ+mDePj5d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
63888a95a1f962c95e5b09c1ff4ffaee_JaffaCakes118

Files

63888a95a1f962c95e5b09c1ff4ffaee_JaffaCakes118
.exe windows:5 windows x86 arch:x86

43eb43a7a69d44c5260f82876b38a558

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetUnhandledExceptionFilter
EnterCriticalSection
GetCurrentProcess
DeleteCriticalSection
GetCurrentThreadId
VirtualAlloc

Sections

.text
Size: 342KB - Virtual size: 342KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 246B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ