287e4d3a679f452775a07bd0949b69c8_JaffaCakes118 | Triage

Sharing

General

Target

287e4d3a679f452775a07bd0949b69c8_JaffaCakes118
Size

83KB
MD5

287e4d3a679f452775a07bd0949b69c8
SHA1

674dce6502a74f30c419aa73d4d6af76782ae8c4
SHA256

dbc0aa81de8a171b52c9bef13dec2bb70fd585390a7f667dd12cba034d5654f0
SHA512

426b41012bdb5d583f4ecfacecc40be3215b44bceb6c42cd1c5cc3a1cd9fb1d33fe7bdb3a61427e4895613fc566c6b44c4e169ab0c040e75a82be7ed9aaffcd1
SSDEEP

1536:s+c9Xov4rjqwdSuhPr+0MjSzG01G1cZixkruhjpjEErxTWDTMqhGKYIZTET8bDQ:mqMeuSeyjIGt1cZiaqZpjBkMqhGKZTbY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
287e4d3a679f452775a07bd0949b69c8_JaffaCakes118

Files

287e4d3a679f452775a07bd0949b69c8_JaffaCakes118
.exe windows:4 windows x86 arch:x86

9c0a98b539f192460e233657db173d80

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EndUpdateResourceW
GetProfileSectionA
_hread
GlobalSize
VerSetConditionMask
GetExitCodeThread
SleepEx
GlobalGetAtomNameW
TerminateJobObject
RtlCaptureStackBackTrace
lstrlenW
WriteProfileSectionW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zrdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE