4282d7687d1b89ec0e2eba50f85ce264_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4282d7687d1b89ec0e2eba50f85ce264_JaffaCakes118
Size

78KB
MD5

4282d7687d1b89ec0e2eba50f85ce264
SHA1

dfdc3bae9b49a9992fb962892042175ae195dec9
SHA256

c48ae11e844ab551aa28cea137a8d3a55f03a24129a4f8b20b9c0cf87f8ab3a1
SHA512

168c9b7a9845f3d6f05e69555ed35561e8d0e9c83dad8323091f99b1095c72017a7013abfbc24fb98a31641ba1219289a1c5d72d20467f5e307c6bc9611e7be5
SSDEEP

1536:4NXZ3I9hJgdG+yYiJKJViNRkiygdR5tvV51E25BPil:Q3IXGYKiRHygXjdB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4282d7687d1b89ec0e2eba50f85ce264_JaffaCakes118

Files

4282d7687d1b89ec0e2eba50f85ce264_JaffaCakes118
.exe windows:5 windows x86 arch:x86

fffd9566f06cae802a77a95301407935

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LeaveCriticalSection
Sleep
EnterCriticalSection
SetUnhandledExceptionFilter
GetCurrentProcess
VirtualAlloc

Sections

.text
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 232B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ