64d2cde23a5e575e3671f8bc834e935f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

64d2cde23a5e575e3671f8bc834e935f_JaffaCakes118
Size

84KB
MD5

64d2cde23a5e575e3671f8bc834e935f
SHA1

facd975322e3b188eb7c4dd75cb085231a5639d3
SHA256

5ebccb732a76f6aaa7fdb0638ff4ea09bbff40a44114c78182e79c3b065e1022
SHA512

922a72f02b1f6e7e27524f185443d425e5d0d2200d40706f9c6435e7b95fb9cb313bc65078754a022b8f5f4ef2d15d92ac3631d49db86f0a909c78b27c0768a3
SSDEEP

1536:c+RozUFAJZPDtdA2epBegTubMJzQYHCmGP6sIfLHig2AWXu4FpZGmZ/9MN8TPVvc:c1zU6JZPDYzp8gTubTYQa9W+4dGi/9M6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64d2cde23a5e575e3671f8bc834e935f_JaffaCakes118

Files

64d2cde23a5e575e3671f8bc834e935f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

55fb0c14da89334a85b06e54279b978b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\Programming\boxp\boxp\Debug Log\_boxpdl.pdb

Imports

kernel32

OutputDebugStringA
ExitProcess
LoadLibraryA
VirtualAlloc
RtlUnwind
VirtualQuery
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent

Sections

.text
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.plugins
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE