b22c82e43c7df75b4c555f67ca5f3604_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b22c82e43c7df75b4c555f67ca5f3604_JaffaCakes118
Size

13KB
MD5

b22c82e43c7df75b4c555f67ca5f3604
SHA1

f900345f18473f107dd7e3c8b27e7471fa12cef9
SHA256

c1efa67f3d7d9389b851543d48e0b83bd7a117aec644a9c56ac9a312d6b8e601
SHA512

90be476c57245f3ee4a78e4f3b1dc3ad67a44212c244c347076d595bbb5a757a2efc8d90af715229c115321179e635a5096b26c5a6b6efdaba6d2c57c0469705
SSDEEP

192:1BL/GaViT99RJVuL9bcpApHsLw266Vv9UMJA2AyFUYEsJ6Pc3M3:1R/GhT99FuJcpA1sLo09UMGTyoc3M3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b22c82e43c7df75b4c555f67ca5f3604_JaffaCakes118

Files

b22c82e43c7df75b4c555f67ca5f3604_JaffaCakes118
.exe windows:5 windows x86 arch:x86

561c311de8e554590f17aaf44d417baf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\tmp\test.pdb

Imports

kernel32

GetVersionExA
SleepEx
OpenEventA
CreateThread
ExitProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsProcessorFeaturePresent
GetCurrentProcess
Sleep
GetTickCount
RtlUnwind
TerminateProcess

user32

MessageBoxA

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 684B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 852B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 486B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ