661335a3f2f6c3482b6ac0040d9be365_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

661335a3f2f6c3482b6ac0040d9be365_JaffaCakes118
Size

51KB
MD5

661335a3f2f6c3482b6ac0040d9be365
SHA1

4495318c7ea6af0dc376f265e56b817f94593401
SHA256

89e12bf34116897c63b6e1a98a328e16222f33dab4b2aee2400c60aa3e7a1aaf
SHA512

5380a7e23163694e38cae94f1738d586818b2dedf0805fc30fb498226c70ca2985f35cdc08f892737496fd3fade89b275281ba556807aed037e1c8c58df85180
SSDEEP

768:gukOQrv4Z2/qnzqMGhpcrNO0hHIOClSnw/qc7EY5IK3UCeWuKNQnz3HH:Jv+4rNO02b2KIK3xB4X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
661335a3f2f6c3482b6ac0040d9be365_JaffaCakes118

Files

661335a3f2f6c3482b6ac0040d9be365_JaffaCakes118
.exe windows:4 windows x86 arch:x86

0d623f2dec7b51faae1f8252920270af

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetModuleHandleW
DeleteCriticalSection
CloseHandle
LeaveCriticalSection
GetCurrentThreadId
GetSystemTimeAsFileTime

Sections

.text
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ