b9a1ee856890a57bf592bec5996a8836_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b9a1ee856890a57bf592bec5996a8836_JaffaCakes118
Size

249KB
MD5

b9a1ee856890a57bf592bec5996a8836
SHA1

9b6aebc206ea15ae2c895191cf4bdc5e3db2db7f
SHA256

5f89d4638af2f7d57eb260af3bed3536377de25e03787cd6ddbd6de1c724369e
SHA512

161867678bac12c33517f2b88134320012be57b3528d8f995fd571a657c8759117dfc25bdcc0ef789dc6d2af54884d12e4a78d4e6ad9b707842c102b82080798
SSDEEP

6144:Zyai1FFMnQ6GYwiu1GurP9yfc51yoey2B:QTgFPufT9Gypeym

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9a1ee856890a57bf592bec5996a8836_JaffaCakes118

Files

b9a1ee856890a57bf592bec5996a8836_JaffaCakes118
.exe windows:6 windows x86 arch:x86

8ce3b0bde4b4ecc791746acc5267277b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
GetTickCount
GetStdHandle
VirtualFree
VirtualAlloc
LocalFree
GetStartupInfoW

Sections

.text
Size: 183KB - Virtual size: 183KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 552KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ