3ad6c8c207e843dfdaa37c7ab395acd6_JaffaCakes118 | Triage

Sharing

General

Target

3ad6c8c207e843dfdaa37c7ab395acd6_JaffaCakes118
Size

78KB
MD5

3ad6c8c207e843dfdaa37c7ab395acd6
SHA1

ce02288d4c21bde0a0db65e846cdcc1ee76ed6c6
SHA256

c494767bbe3c5f69cc2724790665e2e4ff8dc746837f25152195c0b1255ebd4f
SHA512

308b2d19bbbfe4fff114ba8ee0a7cc15bad7b8b32184c99436012a77192c3e58589e7afc667b546ab1726cfc5c6d37e9af310fb48935e3aab9ca68b8a5c5f85f
SSDEEP

1536:AHVlak83uOPt780DtChboWMeqZoGjy5ntdVmIB/HWrql:AnWuOF7O8Sew/DvO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3ad6c8c207e843dfdaa37c7ab395acd6_JaffaCakes118

Files

3ad6c8c207e843dfdaa37c7ab395acd6_JaffaCakes118
.exe windows:5 windows x86 arch:x86

fdd8a53a57827a7a2c48d0c0c65be18e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
EnterCriticalSection
DeleteCriticalSection
LeaveCriticalSection
SetUnhandledExceptionFilter
TerminateProcess
Sleep
GetLastError

Sections

.text
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ