56816f8723368401423c66a1a74c5a67_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

56816f8723368401423c66a1a74c5a67_JaffaCakes118
Size

85KB
MD5

56816f8723368401423c66a1a74c5a67
SHA1

ed745802a4ba2ed2f380887e14022a8719060205
SHA256

e5b5d7d52fabbdea27dfd68e535330269a6ca2516f0a7b5f74725cabee5dc05a
SHA512

9dc9f3b8e2afc60bf841459d6401b59175985e5b9e501b17a902e98ed8e70072c8176c1b02fc3576a192311b61c700d0c7303004ab1b65249feadf9b9a0bc3e3
SSDEEP

1536:AHVlak83uOPt780DtChboWMeqZoGjy5ntdVmIel2VzA:AnWuOF7O8Sew/Il2i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
56816f8723368401423c66a1a74c5a67_JaffaCakes118

Files

56816f8723368401423c66a1a74c5a67_JaffaCakes118
.exe windows:5 windows x86 arch:x86

fdd8a53a57827a7a2c48d0c0c65be18e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
EnterCriticalSection
DeleteCriticalSection
LeaveCriticalSection
SetUnhandledExceptionFilter
TerminateProcess
Sleep
GetLastError

Sections

.text
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ