886b4db93c48c33685cc8e0949b33288_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

886b4db93c48c33685cc8e0949b33288_JaffaCakes118
Size

252KB
MD5

886b4db93c48c33685cc8e0949b33288
SHA1

c5c6880db7a93105ab1454505801e3414588e83c
SHA256

abb0691f61c06fa7e32fb7795ad87a3390b2b909be056e5a52f970657eb6f5c0
SHA512

cdb6184d100a0f433867494c971695d767c54c04acdd69582b2f2a7ffbd4795c66c89747fca6fa513a0252268641d8ad96c958a9eb87c0bef447a8a876af6294
SSDEEP

6144:E+9vDK/n5gPzFXW564u86L4qUe3uuRdz:E+xK+zFXj8E+Odz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
886b4db93c48c33685cc8e0949b33288_JaffaCakes118

Files

886b4db93c48c33685cc8e0949b33288_JaffaCakes118
.exe windows:2 windows x86 arch:x86

542395d184e24824552f510367ae9638

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

VirtualFree
GetStdHandle
VirtualAlloc
GetTickCount
GetStartupInfoW
LocalFree
CloseHandle
SetStdHandle

Sections

.text
Size: 191KB - Virtual size: 191KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 568KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ