eadac93d2310d17b27ccfd77aae0b16d_JaffaCakes118 | Triage

Sharing

General

Target

eadac93d2310d17b27ccfd77aae0b16d_JaffaCakes118
Size

48KB
MD5

eadac93d2310d17b27ccfd77aae0b16d
SHA1

aec282543122ebaec79e3341e378fdb399dd1335
SHA256

747414cf196a5468bd33e58dd97b0f07a6734f1bf5741fbf6b5ac7422e10963e
SHA512

a44f30c8f1fc6a226cd78b0f1c8120b487e4274117099942d107909f8f6a5a837dad52e3c94dd3f18d39b426af1d3794fac1b656483f63ea213ee29b9570ae24
SSDEEP

768:ZxWkFf+0Z0n3GJqG66cmSzn0bM0H4IQftwmEiJbiXc1kehYSj1:Ck80Z03GJzjmguft/Ic1kehYSj1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eadac93d2310d17b27ccfd77aae0b16d_JaffaCakes118

Files

eadac93d2310d17b27ccfd77aae0b16d_JaffaCakes118
.exe windows:5 windows x86 arch:x86

72b9a0429c1300cdecf2d28978afbbc5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteCriticalSection
LeaveCriticalSection
CreateFileW
EnterCriticalSection
TerminateProcess
GetLastError
VirtualAlloc

Sections

.text
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ