JaffaCakes118_2e207f5d18629650822cb14486979504 | Triage

Sharing

General

Target

JaffaCakes118_2e207f5d18629650822cb14486979504
Size

43KB
MD5

2e207f5d18629650822cb14486979504
SHA1

4c6b7c239d7b0ffed6ce69b173cbf0818481f38b
SHA256

b4d7994455dfaad62c39953235899f34f4390bcc0f6eb2029702423016f5a847
SHA512

f459e1e5056e7c9b973acc7ba312f32e1e6edc4ec950eed9e100c75235c7275deb6b10df0b86fd0c768e47334360bfee065ac2dfba1d1ae5abdb4cf8a23ef6b7
SSDEEP

768:+O6RlNQNqBE+chxfTPbRdwutsgRxoK25hJqHS9KeKTR6d91X5SybuP0V7ixXlbQ:6RlNQNqBE+chxfTPbRaqsgRxoKgbxKer

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
JaffaCakes118_2e207f5d18629650822cb14486979504

Files

JaffaCakes118_2e207f5d18629650822cb14486979504
.exe windows:5 windows x86 arch:x86

fadff06f4d841e64dee58a5ee801aa72

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetModuleHandleA
FindResourceA
LoadResource
LockResource
SizeofResource
GetModuleFileNameA
ExitProcess
GetTickCount
CreateThread
IsDebuggerPresent
SetUnhandledExceptionFilter
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsProcessorFeaturePresent

user32

SystemParametersInfoA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 860B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 292B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ