65b18bbfb73cc35a04c4efe2caf7d5b7_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

65b18bbfb73cc35a04c4efe2caf7d5b7_JaffaCakes118
Size

381KB
MD5

65b18bbfb73cc35a04c4efe2caf7d5b7
SHA1

de52edfd774c4141f5bcf5f6e0404699ba4c0de8
SHA256

bd5d1b321fb73d155f334ce05130903e2ab57c2e9c851ced534e4027998fa7c3
SHA512

ebb400ea3ff4932f47dd28da68f4c3eb350c2d1d7c18d758f31e0caef50db4cf37e8f200305a0ee2fc5ad920c563cf4bef60db0590f113f9083ffd4fce96bc47
SSDEEP

6144:sQPW4u6X/Iv1g+DnPlhVFr0mU10bA5K5fjodFBZZVx+wZGKj4YGg1b:stePg1xDnPlLFHBbL5fEPBZ1+dKjFGsb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
65b18bbfb73cc35a04c4efe2caf7d5b7_JaffaCakes118

Files

65b18bbfb73cc35a04c4efe2caf7d5b7_JaffaCakes118
.exe windows:4 windows x86 arch:x86

50bd89437edd7d864944d03b054cdec4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SwitchToFiber
GetProcAddress
ExitProcess
GetPriorityClass
GetModuleHandleW

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 439KB - Virtual size: 439KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ