d392a58dd16fe074f65191c85d663b41_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d392a58dd16fe074f65191c85d663b41_JaffaCakes118
Size

244KB
MD5

d392a58dd16fe074f65191c85d663b41
SHA1

74ddb8188fe6d6425fbd77d6668b82f9bbed04a2
SHA256

ee75a9d7297a14f18a4e587d9cf80dd6f41a5d4bafb876724f19e8849137e7dc
SHA512

09521a56767afe2d4df6860b360d94762e9f8388ee1870bdfefd40377b31905800d336b1debe7d0a0260e0ac3690c6a12846f43172b16fdf76b9009ad34df3bb
SSDEEP

6144:NLzv6bUBlU8F64ldcDdppsFxxsLJTPgpsCFqiEonZwl:NLzvWilU8xOdppwYP4cmZo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d392a58dd16fe074f65191c85d663b41_JaffaCakes118

Files

d392a58dd16fe074f65191c85d663b41_JaffaCakes118
.exe windows:0 windows x86 arch:x86

f3eec43e852bb9537785112774c96d94

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

VirtualFree
CloseHandle
GetStdHandle
GetStartupInfoW
VirtualAlloc
LocalFree
GetTickCount

Sections

.text
Size: 175KB - Virtual size: 175KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 560KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ