bae53fd3f4e9a22c4a71c4f90d274b2d_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bae53fd3f4e9a22c4a71c4f90d274b2d_JaffaCakes118
Size

26KB
MD5

bae53fd3f4e9a22c4a71c4f90d274b2d
SHA1

1b71bfdd16639aad84be3725e457c51fb95cea4a
SHA256

00946e787c293b7963fc171d33904f7a513c61434faec65a4c130cd764998fff
SHA512

0f5a95da220d5a66c130375016f8e9aaf238c06e31d5b652ed8bbdeedb493211183cd8735d0d04da7c9b0bb0ad51d0440115e47b52a8a971468e381c977a93bd
SSDEEP

768:wcBVBr5DrOjpyEbMk1l7KVzyXfAugXn9/:wcBVBrFcIml7KVWXouO9/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bae53fd3f4e9a22c4a71c4f90d274b2d_JaffaCakes118

Files

bae53fd3f4e9a22c4a71c4f90d274b2d_JaffaCakes118
.exe windows:6 windows x86 arch:x86

7e228778efafb48e7c9f42da50910054

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SleepEx
MapViewOfFile
GetModuleFileNameW
CreateFileW
FindClose
LoadLibraryA
ReadFileEx
GlobalMemoryStatus
WideCharToMultiByte
CreateFileMappingW
GetProcAddress
VirtualAlloc

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 16KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 494B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.yvs
Size: - Virtual size: 1B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE