bed856b1b7121ebead8fc3113b76db45_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bed856b1b7121ebead8fc3113b76db45_JaffaCakes118
Size

54KB
MD5

bed856b1b7121ebead8fc3113b76db45
SHA1

2dc78787d44eb3fac000744483d63a9aa6e388b6
SHA256

09055017244dadb772e1a28d53231c3d73cbd8b04115a5893a968cdff0dd5068
SHA512

25cdf32e728ea93b93b46ca69041e38295b45db05b563673f0f01a13eab14107eebf98f59ad435825e0e686ebd54c398fd86f15fcafe716f32c868bc61d5731d
SSDEEP

768:+TZh5I1rsfboZ31yqmCFssLJGQFRLTro7hh7uFALPxThMn7LodWcm3bVqAOEl:+TxICfgSCFssj3TromALPxVm6mJq4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bed856b1b7121ebead8fc3113b76db45_JaffaCakes118

Files

bed856b1b7121ebead8fc3113b76db45_JaffaCakes118
.exe windows:5 windows x86 arch:x86

1e10f63c2ed8b7985b125507d1b884d3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleW
VirtualAlloc
LeaveCriticalSection
DeleteCriticalSection
GetSystemTimeAsFileTime
CreateFileW
WideCharToMultiByte
GetLastError
CloseHandle

Sections

.text
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 310B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 432B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ