3f78964e7f12aafc467cdace501ee3e8_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3f78964e7f12aafc467cdace501ee3e8_JaffaCakes118
Size

1.6MB
MD5

3f78964e7f12aafc467cdace501ee3e8
SHA1

6302405d62c2c8e6f39776ac6538a8f02ca24929
SHA256

ad1ceadaa5d66dd4457c0894fcb05eada68688c7140d724c99378a7336e29f49
SHA512

186c3775b9fdc5ee90e6e99511b93fc87f03fdbc3f024ffa84559088568d980e81a5e6d8d0f505e077d4db7c5ef8976c897b7991da2f646e5029d1d38a2ce69e
SSDEEP

12288:jNIfj7DDDLdddddpDYhdefOV53PLtGH3MMZ938MM95zoK6rr:jEzOe2V5jEXMMgMM95z4rr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3f78964e7f12aafc467cdace501ee3e8_JaffaCakes118

Files

3f78964e7f12aafc467cdace501ee3e8_JaffaCakes118
.exe windows:5 windows x86 arch:x86

fdd8a53a57827a7a2c48d0c0c65be18e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
EnterCriticalSection
DeleteCriticalSection
LeaveCriticalSection
SetUnhandledExceptionFilter
TerminateProcess
Sleep
GetLastError

Sections

.text
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 560KB - Virtual size: 560KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ