105e1999ec78358bcd4fa6c0342828f3_JaffaCakes118 | Triage

Sharing

General

Target

105e1999ec78358bcd4fa6c0342828f3_JaffaCakes118
Size

75KB
MD5

105e1999ec78358bcd4fa6c0342828f3
SHA1

7c21fcb60207d86685d752f734940940ff3aad7c
SHA256

01d8e9417f406f68078c90f04fac9b2e60417082617d1e9a4c03ab52456e8290
SHA512

b8153b68d29013532231ea87ebddbc317a9615e32c7a859827e43e14f1a8dba59376024b8d74b9103f03a883b960597b24d73e64fff8fac6e9eef385902c2304
SSDEEP

1536:JxPRnDiObh7RiCXPJhiNu+1mK9b0wvLNdEiKS50WMIUl/WrKSbNnBvZFAn2rANp6:B+iaC/TBwBZTfp0WYfSNRHAn2rAN8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
105e1999ec78358bcd4fa6c0342828f3_JaffaCakes118

Files

105e1999ec78358bcd4fa6c0342828f3_JaffaCakes118
.exe windows:5 windows x86 arch:x86

b938414fe32bb7da2d94ce12ffb207a9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetSystemTimeAsFileTime
GetCurrentThreadId
TerminateProcess
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc

Sections

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 258B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ