3691f5e582e1a39bb41a6bed4d95c09f_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3691f5e582e1a39bb41a6bed4d95c09f_JaffaCakes118
Size

439KB
MD5

3691f5e582e1a39bb41a6bed4d95c09f
SHA1

de2aef89f23edc95d50c894ea86d7cbf26ed3fa9
SHA256

c56e7637c48b4d33e0104020fc3660d3cd2c5a79eb7a7a5e0d723222a73769d1
SHA512

7b3315f51e99b7e963ca9043abe78496933fae1f24bd126418187dbec089f9697ae8ad7f100d9d447879b199b40557fd2c2a6c8c329258926b36110206631936
SSDEEP

12288:qvY+9ru+OEUKh5zJ5HKWLj6UlXZPy0KAPxKuN0F:qvYWrdZtj6KPy0KAZfNe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3691f5e582e1a39bb41a6bed4d95c09f_JaffaCakes118

Files

3691f5e582e1a39bb41a6bed4d95c09f_JaffaCakes118
.exe windows:5 windows x86 arch:x86

774b1d240ec68d43a6b44f6b34e813fe

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP

Imports

kernel32

ResetEvent
ExitProcess
InterlockedCompareExchange
LoadLibraryA
TlsGetValue
GetProcAddress
MulDiv
VirtualProtect

Sections

.text
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 194B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ