1505c37bf09731274951afd0df21e3b0_JaffaCakes118 | Triage

Sharing

General

Target

1505c37bf09731274951afd0df21e3b0_JaffaCakes118
Size

80KB
MD5

1505c37bf09731274951afd0df21e3b0
SHA1

0a2c0671ba7be4853000e3a8490b528bc944d3e1
SHA256

de2901084518236d9ef4b846544f0855e2416d4ac46a0704db4e89219c103f79
SHA512

aefe7d6ee814d1e25f6d838e5e24fa5e6c677d5e769b5e7976f3ae40a573dbf03231e3c8435470ec8357c29329b068a6f117a626ebb06a5d28e38b5992a4a790
SSDEEP

1536:AHVlak83uOPt780DtChboWMeqZoGjy5ntdVmIW9aa:AnWuOF7O8Sew/Ur

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1505c37bf09731274951afd0df21e3b0_JaffaCakes118

Files

1505c37bf09731274951afd0df21e3b0_JaffaCakes118
.exe windows:5 windows x86 arch:x86

fdd8a53a57827a7a2c48d0c0c65be18e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
EnterCriticalSection
DeleteCriticalSection
LeaveCriticalSection
SetUnhandledExceptionFilter
TerminateProcess
Sleep
GetLastError

Sections

.text
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ