762c7100c5135a45be5372d9bf9818d4_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

762c7100c5135a45be5372d9bf9818d4_JaffaCakes118
Size

347KB
MD5

762c7100c5135a45be5372d9bf9818d4
SHA1

bbf2635c58b0a32f900fc6723aed094d1c6ee7e9
SHA256

804948ac3e21ea3263842b5c175cc9ab60fc4f9b78b29008b9c69bde9e29da6c
SHA512

6caffa30e5bd4b759f548c89b5923d3aa3a675aaafd6848979a98f27720c0b180d7c50de5bf2b0b5c0805d04e04377251d04a04b033854f7c2b4677941adbb71
SSDEEP

6144:42VlxdpPYQDypNY1cgCcHNFMMtlBZPYM7VlGJ11bbgBFVkdV1DgQRP:42VlxdpPYLpNecTcnMM3TYUVI71XgBFU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
762c7100c5135a45be5372d9bf9818d4_JaffaCakes118

Files

762c7100c5135a45be5372d9bf9818d4_JaffaCakes118
.exe windows:4 windows x86 arch:x86

886e5621467727085609a7be74f7c338

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetModuleHandleW
LeaveCriticalSection
GetLastError
CreateFileW
GetSystemTimeAsFileTime
Sleep
GetCurrentProcess
WideCharToMultiByte

Sections

.text
Size: 341KB - Virtual size: 340KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ