a67f80d8b4d84e8f2552786383d55459_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a67f80d8b4d84e8f2552786383d55459_JaffaCakes118
Size

22KB
MD5

a67f80d8b4d84e8f2552786383d55459
SHA1

704a3e402e3b0fd24a2465b5b7ab8236b81dcf26
SHA256

7a208f47b413b9f4db818908c68216a7dc553e2c31e0bf2f5686b03b61add182
SHA512

74dda83d50bc3b9ad083ec8bd00bd9f745fcae4d46e882098b387e21581601679638e74c313890939faf419b08efd1e5d01344e91bc8f425284ee9549b8f4dd8
SSDEEP

384:bWH5+UzZ94Hok5Wlm4P/6ZxgmP1/XHSVLtnW/qcAhcrrceoS:C1KHoyimoib1XHSVtnWwc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a67f80d8b4d84e8f2552786383d55459_JaffaCakes118

Files

a67f80d8b4d84e8f2552786383d55459_JaffaCakes118
.exe windows:5 windows x86 arch:x86

cf2297eb1741ef4b8afaf65e0cda04ad

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

X:\_s\Release\server.pdb

Imports

kernel32

IsProcessorFeaturePresent
InitializeCriticalSectionAndSpinCount
GetCurrentThreadId

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE