7818867b9af6f37af52eca005fc6236d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7818867b9af6f37af52eca005fc6236d_JaffaCakes118
Size

183KB
MD5

7818867b9af6f37af52eca005fc6236d
SHA1

5cda9ba331d88f641b5a5888c095d019bdf905bf
SHA256

4e1d1d9b0a3d803237163cf8a586518cea0724a220fed209240f36147282276d
SHA512

b44b80ebfa9ac4cbeb6557b9a97e7ba84c0d6ece341fd6e774b063dc155d1a017c12c58f23cbe592a687d4811bf663b8d99fe8d802b5cb2c3e596ae22565acca
SSDEEP

3072:NGSkFoTqxH18TDNJjmH16Gz8ncwEkheQsEXHwQfvufJHDd1F+yFI7uMbe5/t561L:NGSkbxH+TDNRFM8c4evEAek9DjYyFKuS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7818867b9af6f37af52eca005fc6236d_JaffaCakes118

Files

7818867b9af6f37af52eca005fc6236d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

e76489e5e8fb04e575fc22708aea5bc5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
HeapAlloc
HeapReAlloc
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 836B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 272B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 162KB - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ