d5c9672e1e3a1bb7a61c36379ae21887_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d5c9672e1e3a1bb7a61c36379ae21887_JaffaCakes118
Size

273KB
MD5

d5c9672e1e3a1bb7a61c36379ae21887
SHA1

0b61bdc522c9436ea872bc9fe00b69ad165f28b8
SHA256

06462cb39e88568391c94550d108b494ae6e29189cb9c29fd55f5a67f26bc96b
SHA512

ed15671846d6631ea0ae846a834678451f0f81e6328b20c3e9a544f44d56ea7592d99cfdc2dbd51c9c70d763fafa0985c359d8a28c42e1a40d8c5829e99c2cdf
SSDEEP

6144:hzExYsBwMX4WD7LXS5xDb3bM8CUshkhFVr63qR0:SYsThD7LXS5x3YrhhYPe3qi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5c9672e1e3a1bb7a61c36379ae21887_JaffaCakes118

Files

d5c9672e1e3a1bb7a61c36379ae21887_JaffaCakes118
.exe windows:4 windows x86 arch:x86

7756f274b323bce82e17a0d440c839b4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalAlloc
GetModuleHandleA
_lclose
_lread
_lopen
GlobalAlloc
GetSystemTime
GetModuleFileNameA
Sleep
CreateThread
GetProcAddress
LoadLibraryA

Sections

.text
Size: 4KB - Virtual size: 637B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 388B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 4KB - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ