72f51849c91dec5f5e2e6c3a4153053f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

72f51849c91dec5f5e2e6c3a4153053f_JaffaCakes118
Size

171KB
MD5

72f51849c91dec5f5e2e6c3a4153053f
SHA1

203ce5643a69f8bc8a95ada2ec0810e633fff30b
SHA256

f4d05b1e8ed708d0ef07c78a26d49e0b4b2e2340a76ce3461c3d7231c43826ee
SHA512

4c1f102c914c3d29ec3cbacfde8a59f847e3b82c710e70270624abaa6d5ac9b841d57a22fdd0bb64efb8b3cfcef300ef8631bdef31a775647814debb026715e0
SSDEEP

3072:LZZwkrHU3tAWcieTyNq48tO4tsDsub0ubZRfkkrL8p:dikrU5ci848tCDsubZTkEy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
72f51849c91dec5f5e2e6c3a4153053f_JaffaCakes118

Files

72f51849c91dec5f5e2e6c3a4153053f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

61e5f10389038a19fded01be1b489335

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

OpenSemaphoreA
CreateHardLinkA
GetProcAddress
GetModuleHandleA
GetFileInformationByHandle
AreFileApisANSI

cryptdll

MD5Init

Exports

Exports

?F342n@@YGXPAX@Z

Sections

3
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.23_0
Size: 1024B - Virtual size: 558B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 564B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.RSRc
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.r123c
Size: 512B - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ