24f075f9045f05ec3817d5ca7e0fac8c_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

24f075f9045f05ec3817d5ca7e0fac8c_JaffaCakes118
Size

57KB
MD5

24f075f9045f05ec3817d5ca7e0fac8c
SHA1

b64d14d05667469d2bb60d63b89cc1bce1d2e46d
SHA256

1de17f8e00267ed36597955033daac36ca05f8c31fae28b26f65e19147e5eadc
SHA512

ddcd993c926f2174dc957fd49665d2551fbfda1b82008664127d6613d6ac222ccbc6c492bb5517c2a5f970e7c95ce7d45371d448180fb92cc9cb566b0d03dfff
SSDEEP

768:fc5jdV9fKTg78OY780l/mJgPSfmBabTg/r1s83qhYPBOpb58y99S0QCO6o9jXyPD:k/+pOY7Z/mMSqeTpFhoQNs39GP8S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24f075f9045f05ec3817d5ca7e0fac8c_JaffaCakes118

Files

24f075f9045f05ec3817d5ca7e0fac8c_JaffaCakes118
.exe windows:4 windows x86 arch:x86

09d98ceab6975452436da06148f604c5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetModuleHandleW
LeaveCriticalSection
GetCurrentProcess
SetUnhandledExceptionFilter
Sleep
GetLastError

Sections

.text
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ