55c7bc8a5c7f515ae786b71fe944a761_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

55c7bc8a5c7f515ae786b71fe944a761_JaffaCakes118
Size

228KB
MD5

55c7bc8a5c7f515ae786b71fe944a761
SHA1

2eca6106be8c448b56180a4a96c4d74d4f5bd87d
SHA256

6b039aa3f2404c5ef40742a08d44dbf18ce95c3f8734ee98ac157930c1783e64
SHA512

2f25de62ac315862fa557c3ec533e63d11a52489198473912e113b2e2de206bf31fc745f1fb7a78c06059b13922fdbc74a6e319ba0012fbd11c050f64874e760
SSDEEP

3072:gabsLmXnYx6V3IvbrWXxyitRUJG0AS/lLmXnYx6V3Iv:gabsqXnYAsWnZaqXnYAs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
55c7bc8a5c7f515ae786b71fe944a761_JaffaCakes118

Files

55c7bc8a5c7f515ae786b71fe944a761_JaffaCakes118
.exe windows:5 windows x86 arch:x86

032bffe5df3b5e047e6b7399274af60e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
FindResourceA
LoadResource
GetTickCount
GetWindowsDirectoryA
WriteFile
Sleep
SizeofResource
CreateProcessA
LockResource
GetCurrentDirectoryA
CloseHandle
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess

msvcr90

_crt_debugger_hook
srand
rand
sprintf
memset

Sections

.peglue
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 225KB - Virtual size: 224KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ