eea5a6e2b501a2b7156264068008d4a1_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

eea5a6e2b501a2b7156264068008d4a1_JaffaCakes118
Size

360KB
MD5

eea5a6e2b501a2b7156264068008d4a1
SHA1

1fac92d4bce2e9e5f4a112770c2853251e0d9033
SHA256

6a2b956e92e852f4814a555f852e0c7c9a53141a5e6bec302ffffd86e24da639
SHA512

b94c4d0817d322502c64e2fcf0c150b5ece2a28798b941b8c0d8a0073b20e175471c11c3c25feb686d174742308018a1715f94e4d012b50215592c1d758d8ea4
SSDEEP

6144:BBXnMsukFsLPx4BdhbZQ93B483agdJoZD9g6Dni+axmrPTKAZwv6FZVPcUZxIjyh:HYkwGBjFMR33aPZD9gMn3axm/ZI6FZ9t

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
eea5a6e2b501a2b7156264068008d4a1_JaffaCakes118

Files

eea5a6e2b501a2b7156264068008d4a1_JaffaCakes118
.exe windows:5 windows x86 arch:x86

fade99f9946d40ab6225582d1f5ecd17

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
GetSystemTimeAsFileTime
CloseHandle
GetLastError
Sleep
TerminateProcess
VirtualAlloc

Sections

.text
Size: 342KB - Virtual size: 342KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 238B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ