115ff5a883e22f5b9dd714236dc9fbda_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

115ff5a883e22f5b9dd714236dc9fbda_JaffaCakes118
Size

77KB
MD5

115ff5a883e22f5b9dd714236dc9fbda
SHA1

9e58b11ecaf8a6e1959ce0bc0e581edc2be07ab7
SHA256

81a09b803e9023087c2e623c9c42f7fcca1fa05b646befbe92461b9c61b5ce80
SHA512

d8fc03d29c3d1cb39f47963a9005d8602e87a0db9b2a6f2d3747aa6c663a259a385052e76314369b08a2b7aa6410651a6820fbb1b2a06d8b14bf39ed1ad1b54a
SSDEEP

1536:nHHqHoIsIO28a+t1P+a9i76ynY0R1NC8ZG/J17MkrkFhFW9:nHHqHhl8toas6yYEwk8EkrkFhFW9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
115ff5a883e22f5b9dd714236dc9fbda_JaffaCakes118

Files

115ff5a883e22f5b9dd714236dc9fbda_JaffaCakes118
.exe windows:5 windows x86 arch:x86

184320c94dbad65cfce9192d44ceb3d5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
Sleep
TerminateProcess
GetCurrentProcess
CloseHandle
LeaveCriticalSection
SetUnhandledExceptionFilter
GetCurrentThreadId
GetLastError

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 304B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ